fix(security): Read-all and Write-all permissions should not be used in .github/workflows/sonarcloud.yaml.

[JiGuoDing]

Ⅰ. Describe what this PR does

This PR tries to replace "read-all" with specific permissions for security reasons.

Ⅱ. Does this pull request fix one issue?

fixes #5398

Ⅲ. List the added test cases (unit test/integration test) if any, please explain if no tests are needed.

Ⅳ. Describe how to verify it

Ⅴ. Special notes for reviews

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR enhances security by replacing the overly permissive read-all permission with specific contents: read permission at the workflow level in the sonarcloud.yaml GitHub Actions workflow file. This follows the principle of least privilege while maintaining functionality, as the job-level permissions already explicitly define all required access rights.

Key Changes:

• Replaced permissions: read-all with explicit permissions: contents: read at the workflow level

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.52%. Comparing base (63457dc) to head (7c3c0aa).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #5399   +/-   ##
=======================================
  Coverage   57.52%   57.52%           
=======================================
  Files         444      444           
  Lines       30744    30744           
=======================================
  Hits        17687    17687           
  Misses      11443    11443           
  Partials     1614     1614           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[RongGu]

/lgtm
/approve

[fluid-e2e-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: RongGu

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [RongGu]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment