Merge branch 'main' into joslobo/update-for-feb-release

Author: jslobodzian

.github/CODEOWNERS

@@ -65,6 +65,7 @@
 /SPECS/moby-runc/* @microsoft/cbl-mariner-container-runtime
 /SPECS/kata-containers/* @microsoft/cbl-mariner-kata-containers
 /SPECS/kata-containers-cc/* @microsoft/cbl-mariner-kata-containers
+/SPECS/virtiofsd/* @microsoft/cbl-mariner-kata-containers
 
 /SPECS/cloud-hypervisor/* @microsoft/cbl-mariner-virtualization
 /SPECS/hvloader/* @microsoft/cbl-mariner-kata-containers

.github/workflows/check-clean-stage.yml

@@ -9,6 +9,8 @@ on:
   pull_request:
     branches: [main, dev, 1.0*, 2.0*, fasttrack/*]
 
+permissions: read-all
+
 jobs:
   spec-clean-stage-check:
     name: Spec %clean stage check

.github/workflows/check-entangled-specs.yml

@@ -12,6 +12,8 @@ on:
   pull_request:
     branches: [main, dev, 1.0*, 2.0*, fasttrack/*]
 
+permissions: read-all
+
 jobs:
   check:
     name: Spec Entanglement Mismatch Check

.github/workflows/check-kernel-config.yml

@@ -16,6 +16,8 @@ on:
     paths:
       - 'SPECS/kernel*/config*'
 
+permissions: read-all
+
 jobs:
   check:
     name: Kernel configs check
@@ -25,7 +27,7 @@ jobs:
       # Checkout the branch of our repo that triggered this action
       - name: Workflow trigger checkout
         uses: actions/checkout@v4
-        
+
       - name: Get base commit for PRs
         if: ${{ github.event_name == 'pull_request' }}
         run: |

.github/workflows/check-license-map.yml

@@ -11,6 +11,8 @@ on:
   pull_request:
     branches: [main, dev, 1.0*, 2.0*, fasttrack/*]
 
+permissions: read-all
+
 jobs:
   check:
     name: Spec License Map Check

.github/workflows/check-livepatches.yml

@@ -9,6 +9,8 @@ on:
   pull_request:
     branches: [2.0, fasttrack/*]
 
+permissions: read-all
+
 jobs:
   spec-check:
     name: Livepatches check
@@ -51,7 +53,7 @@ jobs:
           #################### CHECK FAILURE ####################
           Livepatch specs need to be updated!
           Run the following command to perform the update:
-          
+
               toolkit/scripts/livepatching/update_livepatches.sh
 
           #################### CHECK FAILURE ####################

.github/workflows/check-manifests.yml

@@ -9,6 +9,8 @@ on:
   pull_request:
     branches: [main, dev, 1.0*, 2.0*, fasttrack/*]
 
+permissions: read-all
+
 jobs:
   build:
     name: Check Manifests

.github/workflows/check-package-cgmanifest.yml

@@ -9,6 +9,8 @@ on:
   pull_request:
     branches: [main, dev, 1.0*, 2.0*, fasttrack/*]
 
+permissions: read-all
+
 jobs:
 
   build:

.github/workflows/check-spec.yml

@@ -9,6 +9,8 @@ on:
   pull_request:
     branches: [main, dev, 1.0*, 2.0*, fasttrack/*]
 
+permissions: read-all
+
 jobs:
   spec-check:
     name: Spec files check

.github/workflows/check-static-glibc.yml

@@ -10,6 +10,8 @@ on:
   pull_request:
     branches: [main, dev, 1.0*, 2.0*, fasttrack/*]
 
+permissions: read-all
+
 jobs:
   spec-check:
     name: Static glibc version check