chore: put permissions above jobs

Author: gustavovalverde

.github/workflows/cd-deploy-to-dev.yml

@@ -1,7 +1,5 @@
 name: Deploy to dev
 
-permissions: read-all
-
 on:
   pull_request:
     types: [opened, synchronize, reopened, labeled]

.github/workflows/cd-deploy-to-prod.yml

@@ -1,7 +1,5 @@
 name: Deploy to prod
 
-permissions: read-all
-
 on:
   release:
     types:
@@ -14,6 +12,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.job }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions: read-all
+
 jobs:
   build:
     # needs: [test]

.github/workflows/cd-deploy-to-test.yml

@@ -1,7 +1,5 @@
 name: Deploy to test
 
-permissions: read-all
-
 on:
   push:
     branches:
@@ -20,6 +18,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.job }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions: read-all
+
 jobs:
   build:
     uses: ./.github/workflows/sub-build-docker-image.yml

.github/workflows/ci-lint-codebase.patch.yml

@@ -1,7 +1,5 @@
 name: Lint Code Base
 
-permissions: read-all
-
 on:
   pull_request:
     branches: [main]
@@ -11,6 +9,8 @@ on:
       - 'etc/litestream.yml'
       - .github/workflows/ci-lint-codebase.yml
 
+permissions: read-all
+
 jobs:
   linter:
     runs-on: ubuntu-latest