ci(permissions): provided only the necessary permissions to the GITHUB_TOKEN

.github/workflows/release.yml

@@ -6,8 +6,14 @@ name: Release
       - next
       - beta
       - "*.x"
+permissions:
+  contents: read #  for checkout
 jobs:
   release:
+    permissions:
+      contents: write #  to be able to publish a GitHub release
+      issues: write #  to be able to comment on released issues
+      pull-requests: write #  to be able to comment on released pull requests
     name: release
     runs-on: ubuntu-latest
     steps:

.github/workflows/test.yml

@@ -12,6 +12,9 @@ on:
       - opened
       - synchronize
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   test_matrix:
     strategy: