Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: triniwiz

.github/workflows/publish.yml

@@ -19,6 +19,8 @@ on:
         required: false
         default: 'false'
 
+permissions:
+  contents: read
 env:
   NPM_TAG: "latest"
   NPM_PACKAGES: canvas,canvas-babylon,canvas-media,canvas-phaser,canvas-phaser-ce,canvas-pixi,canvas-polyfill,canvas-three,canvas-svg