add dependbot and modify the github token permission (#2747)

* Create dependabot.yml

* modify token permission

Author: China-zoupanpan

.github/dependabot.yml

@@ -0,0 +1,13 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "gradle" # See documentation for possible values
+    directories:
+      - "/utbot-intellij"
+      - "/utbot-framework"
+    schedule:
+      interval: "weekly"

.github/workflows/build-and-run-tests-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] UTBot Java: build and run tests"
 
+permissions: read-all
+
 on:
   workflow_dispatch:
     inputs:
@@ -42,6 +44,7 @@ env:
 
 jobs:
   prepare-matrices:
+    permissions: read-all
     runs-on: ubuntu-latest
     # Outputs are used for passing data to dependent jobs.
     outputs:
@@ -72,6 +75,7 @@ jobs:
 
 
   framework-tests:
+    permissions: read-all
     needs: prepare-matrices
     # Using matrices let create multiple jobs runs based on the combinations of the variables from matrices. 
     # https://docs.github.com/en/actions/using-jobs/using-a-matrix-for-your-jobs
@@ -161,6 +165,7 @@ jobs:
 
 
   spring-tests:
+    permissions: read-all
     runs-on: ubuntu-20.04
     container:
       image: unittestbot/java-env:java17-zulu-jdk-gradle7.6.1-kotlinc1.8.0

.github/workflows/build-and-run-tests.yml

@@ -1,5 +1,7 @@
 name: "UTBot Java: build and run tests"
 
+permissions: read-all
+
 on:  
   push:
     branches:

.github/workflows/collect-statistics.yml

@@ -1,5 +1,7 @@
 name: "[M] UTBot Java: collect statistics"
 
+permissions: read-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/issue-to-project.yml

@@ -1,5 +1,7 @@
 name: Add issues to UTBot Java project
 
+permissions: read-all
+
 on:
   issues:
     types:

.github/workflows/night-statistics-monitoring.yml

@@ -1,5 +1,7 @@
 name: "UTBot Java: night statistics monitoring"
 
+permissions: read-all
+
 on:
    schedule:
      - cron: '0 0 * * *'

.github/workflows/public-rider-plugin.yml

@@ -2,6 +2,8 @@
 
 name: Publish Rider plugin
 
+permissions: read-all
+
 # Controls when the action will run. Workflow runs when manually triggered using the UI
 # or API.
 on:

.github/workflows/publish-cli-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] CLI: publish as archive"
 
+permissions: read-all
+
 on: 
   workflow_call:
     inputs:

.github/workflows/publish-cli-image-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] CLI: publish docker image"
 
+permissions: read-all
+
 on:
   workflow_call:
   workflow_dispatch:

.github/workflows/publish-on-github-packages.yml

@@ -1,5 +1,7 @@
 name: "[M] Publish on GitHub Packages"
 
+permissions: read-all
+
 on:
   workflow_dispatch:
     inputs: