Align workflows and reduce permissions (#30)

Packages read is not required for XFlights builds

Author: beckermarc

.github/workflows/cf.yaml

@@ -14,7 +14,6 @@ on:
 permissions:
   contents: read
   deployments: write
-  packages: read
 
 concurrency:
   group: cf-${{ github.workflow }}-${{ github.head_ref || github.run_id }}
@@ -45,8 +44,6 @@ jobs:
           username: ${{ vars.CF_USERNAME }}
           password: ${{ secrets.CF_PASSWORD }}
       - run: npm install
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
       - run: npx cds up
 

.github/workflows/maven-publish-snapshot.yml

@@ -7,14 +7,13 @@ on:
   push:
     branches: [ "main" ]
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build:
-
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-
     steps:
     - uses: actions/checkout@v6
     - name: Set up JDK
@@ -32,4 +31,4 @@ jobs:
       working-directory: apis/data-service
       run: mvn deploy -s $GITHUB_WORKSPACE/settings.xml
       env:
-        GITHUB_TOKEN: ${{ github.token }}
+        GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/maven.yml

@@ -3,19 +3,17 @@
 
 name: Java CI with Maven
 
-permissions:
-  contents: read
-
 on:
   workflow_call:
   pull_request:
     branches: [ "main" ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
-
     runs-on: ubuntu-latest
-
     steps:
     - uses: actions/checkout@v6
     - name: Set up JDK

.github/workflows/release.yaml

@@ -8,7 +8,6 @@ on:
 permissions:
   contents: read
   deployments: write
-  packages: read
 
 jobs:
   tests: