build: harden security of build

Author: RohitRavindra-dev

.github/workflows/build.yml

@@ -7,13 +7,16 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: read
 
     runs-on: ubuntu-latest
 
     steps:
-
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Go
         uses: actions/setup-go@v5