Restrict permissions to github token for workflows (#2821)

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>

.github/workflows/stale.yaml

@@ -6,6 +6,12 @@ on:
   schedule:
     - cron: "0 0 * * *"
 
+permissions:
+  contents: read
+  issues: write
+  # only needed if marking PRs as stale
+#  pull-requests: write
+
 jobs:
   stale:
     # only on original eclipse-hawkbit/hawkbit repo
@@ -16,12 +22,11 @@ jobs:
       - uses: actions/stale@v10
         with:
           repo-token: ${{ secrets.PAT_SECRET }}
+          # disables automatic marking of issues as stale
           days-before-stale: -1
           days-before-close: 15
           stale-issue-label: 'awaiting'
           close-issue-message: |-
             There has been no response from the original author so I closed this issue.
             Please reach out if you have or find the answers we need so that we can investigate further.
-          only-labels: 'awaiting'
-          skip-stale-issue-message: 'true'
-          skip-stale-pr-message: 'true'
+          only-labels: 'awaiting'