Add permissions

Author: spoorcc

.github/workflows/ci.yml

@@ -45,7 +45,7 @@ jobs:
     needs: draft-release
     uses: ./.github/workflows/python-publish.yml
     permissions:
-      contents: read
+      contents: write
       security-events: write
       id-token: write
     with:

.github/workflows/python-publish.yml

@@ -99,6 +99,9 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ inputs.release_id }}
     needs: build
+    permissions:
+      contents: write
+      security-events: write
     steps:
     - name: Download all the dists
       uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v5