Github Action: Update permissions

Author: anperezrc

.github/workflows/approve_full_tests.yml

@@ -4,6 +4,10 @@ on:
   issue_comment:
     types: [created]
 
+permissions:
+  issues: write
+  pull-requests: read
+
 jobs:
   approve-full-tests:
     runs-on: ubuntu-latest

.github/workflows/claude-code-review.yml

@@ -5,6 +5,11 @@ on:
   pull_request:
     types: [opened, synchronize, ready_for_review, reopened]
 
+permissions:
+  issues: read
+  pull-requests: read
+  id-token: write
+
 jobs:
   claude-review:
     uses: revenuecat/sdk-github-workflows/.github/workflows/claude-code-review.yml@v5

.github/workflows/claude.yml

@@ -11,6 +11,11 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions:
+  issues: read
+  pull-requests: read
+  id-token: write
+
 jobs:
   claude:
     uses: revenuecat/sdk-github-workflows/.github/workflows/claude.yml@v5

.github/workflows/issue-notifications.yml

@@ -9,6 +9,10 @@ on:
   schedule:
     - cron: "0 * * * *"
 
+permissions:
+  issues: read
+  id-token: write
+
 jobs:
   notify:
     uses: revenuecat/sdk-github-workflows/.github/workflows/issue-notifications.yml@v2

.github/workflows/lock.yml

@@ -6,6 +6,9 @@ on:
   schedule:
     - cron: "0 0 * * *" # runs at 00:00 UTC every day
 
+permissions:
+  issues: write
+
 jobs:
   lock:
     runs-on: ubuntu-latest