Fix code scan issues (#2189)

Signed-off-by: ZePan110 <ze.pan@intel.com>

Author: ZePan110

.github/workflows/_build_image.yml

@@ -6,14 +6,11 @@ permissions:
   actions: read
   contents: read
   checks: read
-  deployments: read
   discussions: read
   issues: read
-  packages: read
   pages: read
   pull-requests: read
   repository-projects: read
-  statuses: read
   security-events: read
   id-token: write
   attestations: read

.github/workflows/_example-workflow.yml

@@ -5,15 +5,11 @@ name: Example jobs
 permissions:
   actions: read
   contents: read
-  checks: read
-  deployments: read
   discussions: read
   issues: read
-  packages: read
   pages: read
   pull-requests: read
   repository-projects: read
-  statuses: read
   security-events: read
   id-token: write
   attestations: read
@@ -73,14 +69,11 @@ jobs:
       actions: read
       contents: read
       checks: read
-      deployments: read
       discussions: read
       issues: read
-      packages: read
       pages: read
       pull-requests: read
       repository-projects: read
-      statuses: read
       security-events: read
       id-token: write
       attestations: read
@@ -102,13 +95,9 @@ jobs:
     permissions:
       actions: read
       contents: read
-      checks: write
-      deployments: write
       issues: write
-      packages: write
       pages: write
       pull-requests: write
-      statuses: write
       security-events: read
     needs: [build-images]
     if: ${{ inputs.test_compose }}

.github/workflows/_run-docker-compose.yml

@@ -5,13 +5,9 @@ name: Image Build
 permissions:
   actions: read
   contents: read
-  checks: write
-  deployments: write
   issues: write
-  packages: write
   pages: write
   pull-requests: write
-  statuses: write
   security-events: read
 on:
   workflow_call:

.github/workflows/manual-example-workflow.yml

@@ -6,15 +6,11 @@ name: Examples CD workflow on manual event
 permissions:
   actions: read
   contents: read
-  checks: read
-  deployments: read
   discussions: read
   issues: read
-  packages: read
   pages: read
   pull-requests: read
   repository-projects: read
-  statuses: read
   security-events: read
   id-token: write
   attestations: read

.github/workflows/manual-image-build.yml

@@ -5,15 +5,11 @@ name: Build specific images on manual event
 permissions:
   actions: read
   contents: read
-  checks: read
-  deployments: read
   discussions: read
   issues: read
-  packages: read
   pages: read
   pull-requests: read
   repository-projects: read
-  statuses: read
   security-events: read
   id-token: write
   attestations: read

.github/workflows/manual-reset-local-registry.yml

@@ -71,13 +71,9 @@ jobs:
       repository-projects: read
       id-token: write
       contents: read
-      checks: write
-      deployments: write
       issues: write
-      packages: write
       pages: write
       pull-requests: write
-      statuses: write
       security-events: read
     needs: [get-build-matrix, clean-up]
     if: ${{ needs.get-image-list.outputs.matrix != '' }}

.github/workflows/nightly-docker-build-publish.yml

@@ -25,7 +25,7 @@ on:
   workflow_dispatch:
 
 env:
-  EXAMPLES: ${{ vars.NIGHTLY_RELEASE_EXAMPLES }}
+  EXAMPLES: #${{ vars.NIGHTLY_RELEASE_EXAMPLES }}
   TAG: "latest"
   PUBLISH_TAGS: "latest"
 
@@ -94,16 +94,14 @@ jobs:
       attestations: read
       discussions: read
       models: read
+      checks: read
       repository-projects: read
       id-token: write
       contents: read
-      checks: write
-      deployments: write
       issues: write
       packages: write
       pages: write
       pull-requests: write
-      statuses: write
       security-events: read
     if: ${{ needs.get-build-matrix.outputs.examples_json != '' }}
     strategy:

.github/workflows/pr-code-scan.yml

@@ -70,7 +70,6 @@ jobs:
   shell-check:
     runs-on: ubuntu-latest
     permissions:
-      security-events: write
       actions: read
       contents: read
     steps:

.github/workflows/pr-docker-compose-e2e.yml

@@ -49,13 +49,9 @@ jobs:
     permissions:
       actions: read
       contents: read
-      checks: write
-      deployments: write
       issues: write
-      packages: write
       pages: write
       pull-requests: write
-      statuses: write
       security-events: read
     needs: [get-test-matrix]
     if: ${{ needs.get-test-matrix.outputs.run_matrix != '' }}

.github/workflows/pr-image-size.yml

@@ -41,7 +41,6 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-      actions: write
     if: needs.get-check-list.outputs.files != ''
     strategy:
       matrix: