Merge pull request #1923 from headlamp-k8s/remove-secrets

github: Remove permission that does not work

.github/workflows/app-artifacts-mac.yml

@@ -20,7 +20,6 @@ jobs:
     runs-on: macos-latest
     permissions:
       contents: read
-      secrets: read
       actions: write # needed to upload artifacts
     steps:
     - uses: actions/checkout@v4
@@ -71,7 +70,6 @@ jobs:
     permissions:
       id-token: write # For fetching an OpenID Connect (OIDC) token
       contents: read
-      secrets: read
     runs-on: windows-latest
     needs: build-mac
     if: ${{ inputs.signBinaries }}

.github/workflows/docker-extension-release.yml

@@ -16,8 +16,6 @@ jobs:
   build_and_push_docker_extension:
     name: Build docker extension
     runs-on: ubuntu-latest
-    permissions:
-      secrets: read # needed to fetch docker hub creds
     steps:
       - name: Login to DockerHub
         uses: docker/login-action@v1

.github/workflows/pr-to-update-homebrew.yml

@@ -16,7 +16,6 @@ jobs:
     permissions:
       contents: write # needed to push a branch
       pull-requests: write # needed to open a pull request
-      secrets: read
 
     steps:
       - name: Checkout headlamp repo

.github/workflows/trigger-flatpak-update.yml

@@ -14,10 +14,6 @@ jobs:
   trigger_flatpak_update:
     name: Trigger Flatpak Headlamp version update
     runs-on: ubuntu-latest
-
-    permissions:
-      secrets: read # needed to fetch gh token
-
     steps:
       - name: Trigger via gh
         env: