Run GitHub workflow with read permission. (#607)

Author: jianjunz

.github/workflows/ci.yaml

@@ -1,4 +1,5 @@
 name: Continuous Integration
+permissions: read-all
 
 on: [push, pull_request]
 
@@ -9,7 +10,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v2
         with:
-          node-version: "14"
+          node-version: "20"
       - run: npm install
       - run: grunt check
         working-directory: ./scripts
@@ -32,7 +33,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v2
         with:
-          node-version: "14"
+          node-version: "20"
       - run: npm install
       - name: Run test cases
         env: