Merge pull request #3305 from nichwall/update_api_linting_workflow

Update api linting workflow

.github/workflows/lint-openapi.yml

@@ -1,13 +1,15 @@
 name: API linting
 
-# Run on pull requests or pushes when there is a change to the OpenAPI file
+# Run on pull requests or pushes when there is a change to any OpenAPI files in docs/
 on:
-  push:
-    paths:
-      - docs/
   pull_request:
+  push:
     paths:
-      - docs/
+      - 'docs/**'
+
+# This action only needs read permissions
+permissions:
+  contents: read
 
 jobs:
   build: