add dependbot and modify the github token permission

.github/dependabot.yml

@@ -0,0 +1,13 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+ - package-ecosystem: "gradle" # See documentation for possible values
+ directories:
+ - "/utbot-intellij"
+ - "/utbot-framework"
+ schedule:
+ interval: "weekly"

.github/workflows/build-and-run-tests-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] UTBot Java: build and run tests"
 
+permissions: read-all
+
 on:
  workflow_dispatch:
  inputs:
@@ -42,6 +44,7 @@ env:
 
 jobs:
  prepare-matrices:
+ permissions: read-all
  runs-on: ubuntu-latest
  # Outputs are used for passing data to dependent jobs.
  outputs:
@@ -72,6 +75,7 @@ jobs:
 
 
  framework-tests:
+ permissions: read-all
  needs: prepare-matrices
  # Using matrices let create multiple jobs runs based on the combinations of the variables from matrices. 
  # https://docs.github.com/en/actions/using-jobs/using-a-matrix-for-your-jobs
@@ -161,6 +165,7 @@ jobs:
 
 
  spring-tests:
+ permissions: read-all
  runs-on: ubuntu-20.04
  container:
  image: unittestbot/java-env:java17-zulu-jdk-gradle7.6.1-kotlinc1.8.0

.github/workflows/build-and-run-tests.yml

@@ -1,5 +1,7 @@
 name: "UTBot Java: build and run tests"
 
+permissions: read-all
+
 on: 
  push:
  branches:

.github/workflows/collect-statistics.yml

@@ -1,5 +1,7 @@
 name: "[M] UTBot Java: collect statistics"
 
+permissions: read-all
+
 on:
  workflow_call:
  inputs:

.github/workflows/issue-to-project.yml

@@ -1,5 +1,7 @@
 name: Add issues to UTBot Java project
 
+permissions: read-all
+
 on:
  issues:
  types:

.github/workflows/night-statistics-monitoring.yml

@@ -1,5 +1,7 @@
 name: "UTBot Java: night statistics monitoring"
 
+permissions: read-all
+
 on:
  schedule:
  - cron: '0 0 * * *'

.github/workflows/public-rider-plugin.yml

@@ -2,6 +2,8 @@
 
 name: Publish Rider plugin
 
+permissions: read-all
+
 # Controls when the action will run. Workflow runs when manually triggered using the UI
 # or API.
 on:

.github/workflows/publish-cli-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] CLI: publish as archive"
 
+permissions: read-all
+
 on: 
  workflow_call:
  inputs:

.github/workflows/publish-cli-image-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] CLI: publish docker image"
 
+permissions: read-all
+
 on:
  workflow_call:
  workflow_dispatch:

.github/workflows/publish-on-github-packages.yml

@@ -1,5 +1,7 @@
 name: "[M] Publish on GitHub Packages"
 
+permissions: read-all
+
 on:
  workflow_dispatch:
  inputs:

.github/workflows/publish-plugin-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] Plugin: publish as archive"
 
+permissions: read-all
+
 on:
  workflow_call:
  inputs:

.github/workflows/run-chosen-tests-from-branch.yml

@@ -1,5 +1,7 @@
 name: "[M] Run chosen tests"
 
+permissions: read-all
+
 on: 
  workflow_dispatch:
  inputs: