chore: [StepSecurity] Apply security best practices (#2105)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: exploreriii <133720349+exploreriii@users.noreply.github.com>

Author: stepsecurity-app[bot]

.github/workflows/sync-issue-labels-add.yml

@@ -9,6 +9,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.workflow_run.id }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   apply:
     if: github.event.workflow_run.conclusion == 'success'