Add cron & read permissions to workflows (#19)

.github/workflows/check.yml

@@ -4,6 +4,12 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
 permissions:
   contents: read
 concurrency:

.github/workflows/codeql.yml

@@ -13,20 +13,20 @@ name: CodeQL
 on:
   push:
     branches:
-      - "main"
+      - main
   pull_request:
     # The branches below must be a subset of the branches above
     branches:
-      - "main"
+      - main
   schedule:
     # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
-    - cron: '0 0 * * 1'
+    - cron: "0 0 * * 1"
+permissions:
+  contents: read
 concurrency:
   # Cancel old actions upon push
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
-permissions:
-  contents: read
 jobs:
   analyze:
     name: Analyze

.github/workflows/test_components_input.yml

@@ -4,6 +4,18 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
+permissions:
+  contents: read
+concurrency:
+  # Cancel old actions upon push
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
 jobs:
   install_on_runner:
     runs-on: ${{ matrix.os }}

.github/workflows/test_default_input.yml

@@ -4,6 +4,18 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
+permissions:
+  contents: read
+concurrency:
+  # Cancel old actions upon push
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
 jobs:
   install_on_runner:
     runs-on: ${{ matrix.os }}

.github/workflows/test_install_stable_nightly.yml

@@ -4,6 +4,18 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
+permissions:
+  contents: read
+concurrency:
+  # Cancel old actions upon push
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
 jobs:
   install_on_runner:
     runs-on: ${{ matrix.os }}

.github/workflows/test_override_input.yml

@@ -4,6 +4,18 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
+permissions:
+  contents: read
+concurrency:
+  # Cancel old actions upon push
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
 jobs:
   install_on_runner:
     runs-on: ${{ matrix.os }}

.github/workflows/test_targets_input.yml

@@ -4,6 +4,18 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
+permissions:
+  contents: read
+concurrency:
+  # Cancel old actions upon push
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
 jobs:
   install_on_runner:
     runs-on: ${{ matrix.os }}

.github/workflows/test_toolchain_input.yml

@@ -4,6 +4,18 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
+permissions:
+  contents: read
+concurrency:
+  # Cancel old actions upon push
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
 jobs:
   install_on_runner:
     runs-on: ${{ matrix.os }}

.github/workflows/unit_tests.yml

@@ -4,6 +4,12 @@ on:
     branches:
       - main
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+  schedule:
+    # Every Monday at midnight: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule
+    - cron: "0 0 * * 1"
 permissions:
   contents: read
 concurrency: