From 57fdc250ce80de7a6d1a05d05460c3399d2a4780 Mon Sep 17 00:00:00 2001
From: Ikiru Yoshizaki <3856350+guitarrapc@users.noreply.github.com>
Date: Tue, 13 May 2025 17:51:44 +0900
Subject: [PATCH] ci: fix ghalint

---
 .github/workflows/{build-debug.yml => build-debug.yaml}     | 4 +++-
 .github/workflows/{build-release.yml => build-release.yaml} | 6 +++++-
 ...prevent-github-change.yml => prevent-github-change.yaml} | 2 ++
 .github/workflows/{stale.yml => stale.yaml}                 | 4 ++++
 4 files changed, 14 insertions(+), 2 deletions(-)
 rename .github/workflows/{build-debug.yml => build-debug.yaml} (85%)
 rename .github/workflows/{build-release.yml => build-release.yaml} (92%)
 rename .github/workflows/{prevent-github-change.yml => prevent-github-change.yaml} (84%)
 rename .github/workflows/{stale.yml => stale.yaml} (66%)

diff --git a/.github/workflows/build-debug.yml b/.github/workflows/build-debug.yaml
similarity index 85%
rename from .github/workflows/build-debug.yml
rename to .github/workflows/build-debug.yaml
index 70b312d..5916d2d 100644
--- a/.github/workflows/build-debug.yml
+++ b/.github/workflows/build-debug.yaml
@@ -10,7 +10,9 @@ on:
 
 jobs:
   build-dotnet:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
     timeout-minutes: 10
     steps:
       - uses: Cysharp/Actions/.github/actions/checkout@main
diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yaml
similarity index 92%
rename from .github/workflows/build-release.yml
rename to .github/workflows/build-release.yaml
index 14abbff..6b96936 100644
--- a/.github/workflows/build-release.yml
+++ b/.github/workflows/build-release.yaml
@@ -14,7 +14,9 @@ on:
 
 jobs:
   build-dotnet:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
     timeout-minutes: 10
     steps:
       - uses: Cysharp/Actions/.github/actions/checkout@main
@@ -33,6 +35,8 @@ jobs:
   # release
   create-release:
     needs: [build-dotnet]
+    permissions:
+      contents: write
     uses: Cysharp/Actions/.github/workflows/create-release.yaml@main
     with:
       commit-id: ${{ github.sha }}
diff --git a/.github/workflows/prevent-github-change.yml b/.github/workflows/prevent-github-change.yaml
similarity index 84%
rename from .github/workflows/prevent-github-change.yml
rename to .github/workflows/prevent-github-change.yaml
index e654f3f..74573bb 100644
--- a/.github/workflows/prevent-github-change.yml
+++ b/.github/workflows/prevent-github-change.yaml
@@ -7,4 +7,6 @@ on:
 
 jobs:
   detect:
+    permissions:
+      contents: read
     uses: Cysharp/Actions/.github/workflows/prevent-github-change.yaml@main
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yaml
similarity index 66%
rename from .github/workflows/stale.yml
rename to .github/workflows/stale.yaml
index b480c3e..c333a85 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yaml
@@ -7,4 +7,8 @@ on:
 
 jobs:
   stale:
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
     uses: Cysharp/Actions/.github/workflows/stale-issue.yaml@main