Merge pull request #412 from joycebrum/master

Set permissions to github workflows

Author: josephlr

.github/workflows/build.yml

@@ -10,6 +10,9 @@ on:
     - cron: "40 4 * * *" # every day at 4:40
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   stable:
     name: "Test MSRV and Stable Features"

.github/workflows/release.yml

@@ -5,10 +5,15 @@ on:
     branches:
       - "master"
 
+permissions:
+  contents: read
+
 jobs:
   release:
     name: "Release"
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     timeout-minutes: 15
     environment: crates_io_release