senzing-factory/build-resources#15 update go workflow permissions (#16)

* senzing-factory/build-resources#15 update go workflow permissions

* senzing-factory/build-resources#15 update go workflow permissions

.github/workflows/go-proxy-pull.yaml

@@ -5,10 +5,15 @@
 # - https://futurestud.io/tutorials/github-actions-run-a-workflow-when-creating-a-tag
 
 name: go-proxy-pull.yaml
+
 on:
   push:
     tags:
       - "v[0-9]+.[0-9]+.[0-9]+"
+
+permissions:
+  contents: write
+
 jobs:
   go-proxy-pull:
     runs-on: ubuntu-latest

.github/workflows/go-test-linux.yaml

@@ -0,0 +1,31 @@
+# Based on
+# - https://github.com/marketplace/actions/setup-go-environment
+
+name: go-test.yaml
+
+on: [push]
+
+permissions:
+  contents: read
+
+jobs:
+  go-test-linux:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        go: ["1.21"]
+        os: [ubuntu-latest]
+    name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go }}
+
+      - name: Run go test
+        run: go test -v -p 1 ./...

.github/workflows/go-security.yaml → .github/workflows/gosec.yaml

@@ -1,19 +1,26 @@
-# Based on
-# - https://github.com/securego/gosec
+name: 'gosec'
 
-name: go-security.yaml
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
 
-on: [push]
+permissions:
+  contents: read
 
 jobs:
-  tests:
+  gosec:
     runs-on: ubuntu-latest
     env:
       GO111MODULE: on
     steps:
       - name: Checkout Source
         uses: actions/checkout@v4
+
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@master
+        uses: securego/gosec@v2.18.2
         with:
           args: ./...

.github/workflows/make-go-tag.yaml

@@ -1,15 +1,20 @@
-name: make-go-tag.yaml
+name: 'make go tag'
+
 on:
   push:
     tags:
       - "[0-9]+.[0-9]+.[0-9]+"
-permissions: write-all
+
+permissions:
+  contents: write
+
 jobs:
   make-go-tag:
     name: Make a vM.m.P tag
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+
       - name: Make go version tag
-        uses: senzing-factory/github-action-make-go-tag@main
+        uses: senzing-factory/github-action-make-go-tag@v1