Enhance GitHub Actions workflows security and permissions

[yangchuansheng]

No description provided.

[gru-agent]

TestGru Assignment

Summary

Link	CommitId	Status	Reason
Detail	4e6d707	🚫 Skipped	No files need to be tested {".github/workflows/docs-deploy-kubeconfig.yml":"no test value",".github/workflows/docs-deploy-vercel.yml":"no test value"}

Tip

You can @gru-agent and leave your feedback. TestGru will make adjustments based on your input

[Copilot]

Pull Request Overview

This pull request enhances the security and permissions setup for GitHub Actions workflows used in documentation deployments. Key changes include the introduction of explicit permissions and concurrency configuration in the docs-deploy-vercel workflow, an update to the peaceiris/actions-gh-pages action (v4), and the modification of authentication credentials within the docs-deploy-kubeconfig workflow.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/docs-deploy-vercel.yml	Added permissions and concurrency; upgraded the deploy action to v4 and switched token usage.
.github/workflows/docs-deploy-kubeconfig.yml	Configured granular permissions and updated container login credentials for enhanced security.

Comments suppressed due to low confidence (2)

.github/workflows/docs-deploy-vercel.yml:79

• Ensure that upgrading to peaceiris/actions-gh-pages@v4 does not require additional configuration changes to maintain proper deployment functionality.

uses: peaceiris/actions-gh-pages@v4

.github/workflows/docs-deploy-kubeconfig.yml:60

• Verify that replacing github.repository_owner with github.actor meets the authentication requirements for logging into ghcr.io and does not inadvertently impact access control.

username: ${{ github.actor }}