ci: improve security of release.yml

Author: devmatteini

.github/workflows/release.yml

@@ -6,6 +6,9 @@ on:
       # x.y.z version format
       - "[0-9]+.[0-9]+.[0-9]+*"
 
+permissions:
+  contents: write
+
 env:
   CARGO_TERM_COLOR: always
 
@@ -15,6 +18,8 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+        with:
+          persist-credentials: false
 
       - name: Get the release version from the tag
         run: |
@@ -68,6 +73,8 @@ jobs:
             use-cross: false
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+        with:
+          persist-credentials: false
 
       - name: Get the release version from the tag
         shell: bash