[StepSecurity] ci: Harden GitHub Actions (#229)

Signed-off-by: Filip Christiansen <22807962+filipchristiansen@users.noreply.github.com>

Author: step-security-bot

.github/workflows/ci.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}

.github/workflows/publish.yml

@@ -5,6 +5,9 @@ on:
     types: [created]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   release-build:
     runs-on: ubuntu-latest