fix: add explicit permissions block to CI workflow #61

	name: CI

	on:
	push:
	branches: ["**"]
	pull_request:
	branches: ["**"]

	# Minimum permissions required for CI workflow (secure by default).
	# See: https://docs.github.com/en/actions/security-guides/automatic-token-validation
	permissions:
	contents: read

	jobs:
	test:
	name: Test
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

	- name: Set up Go
	uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
	with:
	go-version-file: go.mod
	cache: true

	- name: Build
	run: go build ./...

	- name: Vet
	run: go vet ./...

	- name: Test
	run: go test -race ./...

	- name: Install govulncheck
	run: go install golang.org/x/vuln/cmd/govulncheck@latest

	- name: Run govulncheck
	run: govulncheck ./...

Provide feedback