update workflow permissions

Author: sathiya-nhs

.github/workflows/apigee-release-pipeline.yml

@@ -4,7 +4,8 @@ defaults:
     shell: bash # Explicitly sets pipeline to fail if any subprocess fails
 on:
   push
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   deploy-hello-world:

.github/workflows/continous-integration-workflow.yaml

@@ -50,9 +50,7 @@ jobs:
         run: make check-licenses
 
       - name: Set SPEC_VERSION env var
-        run: echo ::set-env name=SPEC_VERSION::$(poetry run python scripts/calculate_version.py)
-        env:
-          ACTIONS_ALLOW_UNSECURE_COMMANDS: true
+        run: echo "SPEC_VERSION=$(poetry run python scripts/calculate_version.py)" >> "$GITHUB_ENV"
 
       - name: Create release (master only)
         id: create-release

.github/workflows/spec-release-pipeline.yml

@@ -4,7 +4,8 @@ defaults:
     shell: bash # Explicitly sets pipeline to fail if any subprocess fails
 on:
   push
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   deploy-hello-world-spec: