[Code Scan] Refine GitHub Actions Workflow Permissions for Enhanced S…

…ecurity (#4647)

* Update trigger_onebranch_ci.yml

* Update benchmark-action.yml

.github/workflows/benchmark-action.yml

@@ -8,13 +8,13 @@ on:
       - src/client/Microsoft.Identity.Client/**/*.cs
 
 permissions:
-  # Deployments permission to deploy GitHub pages website
-  deployments: write
   # Contents permission to update benchmark contents in gh-pages branch
-  contents: write
+  contents: read
 
 jobs:
   benchmark:
+    permissions:
+      contents: write  # Elevate permissions specifically for this job
     name: Run performance benchmarks
     runs-on: ubuntu-latest
     steps:

.github/workflows/trigger_onebranch_ci.yml

@@ -7,6 +7,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
     build:
         name: Call OneBranch ADO Pipeline (CI)