Add arm64 binaries and docker containers (#2382)

# Goal
The goal of this PR is to add support for linux/arm64 in binaries and
docker images

Closes #779

Author: wilwade

.github/workflows/benchmarks-run.yml

@@ -20,7 +20,7 @@ jobs:
     if: github.repository == 'frequency-chain/frequency'
     name: Build Benchmark Binary
     runs-on: ubicloud-standard-16
-    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.4.0
+    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.5.5
     permissions:
       contents: read
     steps:
@@ -117,7 +117,7 @@ jobs:
     name: Post Benchmark Tests
     needs: run-benchmarks
     runs-on: ubicloud-standard-16
-    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.4.0
+    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.5.5
     permissions:
       contents: read
     steps:

.github/workflows/check-migrations.yml

@@ -5,14 +5,18 @@ on:
     types:
       - labeled
   workflow_dispatch:
+# Set default permissions as restrictive
+permissions:
+  contents: read
+  packages: read
 
 jobs:
   check-migrations:
     if: github.event_name == 'workflow_dispatch' || contains(github.event.pull_request.labels.*.name, 'change/storage-migration')
     name: Check Migrations on Paseo
     continue-on-error: false
     runs-on: ubicloud-standard-8
-    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.4.0
+    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.5.5
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4

.github/workflows/check-polkadot-releases.yml

@@ -8,6 +8,11 @@ env:
   REPO_URL: https://api.github.com/repos/paritytech/polkadot-sdk
   TRACKING_GIT_BRANCH: ci/latest-polkadot-full-release
   RELEASE_TRACK_FILENAME: .github/.latest-polkadot-full-release.txt
+
+# Set default permissions as restrictive
+permissions:
+  contents: write
+
 jobs:
   record-polkadot-latest-release-version:
     runs-on: ubuntu-latest

.github/workflows/common/codecov/action.yml

@@ -7,12 +7,16 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: Install grcov
-      shell: bash
-      run: cargo install --locked grcov --version 0.9.0
     - name: Add llvm-tools
       shell: bash
-      run: rustup component add llvm-tools-preview
+      run: rustup component add llvm-tools-preview && rustup show && echo $PATH
+
+    - name: Install grcov
+      shell: bash
+      run: |
+        cargo install --locked grcov --version 0.9.1
+        which grcov
+
     - name: Build
       shell: bash # Limited to 10 threads max
       run: cargo build -j 10 --features frequency-lint-check

.github/workflows/common/srtool/action.yml

@@ -1,11 +1,11 @@
-# This is a copy of the action file from https://github.com/chevdor/srtool-actions/blob/48e9baed50ca414936dfac59d34d8b9bbe581abd/action.yml
+# This is a copy of the action file from https://github.com/paritytech/srtool-actions/blob/9cf7232631d71f9510e05ab6297b1aa57e588fce/action.yml
 # It is pulled in and modified for the following reasons:
 # 1. We needed to add an additional environment variable to the docker run (CARGO_NET_RETRY=10)
 # 2. Local for direct auditing of the action building the runtime
 
 name: "Srtool"
 description: "Build WASM Runtime with SRTOOL"
-author: chevdor
+author: chevdor & paritytech
 branding:
   icon: "package"
   color: "blue"

.github/workflows/e2e-testnet.yml

@@ -14,6 +14,10 @@ on:
 env:
   TAG_FROM_UI: ${{github.event.inputs.release-version}}
 
+# Set default permissions as restrictive
+permissions:
+  contents: read
+
 jobs:
   run-e2e-setup:
     name: Run E2E Test Prep

.github/workflows/merge-pr.yml

@@ -7,12 +7,16 @@ on:
   push:
     branches:
       - main
+# Set default permissions as restrictive
+permissions:
+  contents: read
+  packages: read
 
 jobs:
   publish-js-api-augment-rc:
     name: Merge - Publish JS API Augment Release Candidate
     runs-on: ubicloud-standard-4
-    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.4.0
+    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.5.5
     steps:
       - name: Check Out Repo
         uses: actions/checkout@v4
@@ -49,7 +53,7 @@ jobs:
   calc-code-coverage:
     name: Merge - Calculate Code Coverage
     runs-on: ubicloud-standard-30
-    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.4.0
+    container: ghcr.io/frequency-chain/frequency/ci-base-image:1.5.5
     steps:
       - name: Check Out Repo
         uses: actions/checkout@v4