Fix missing top-level permissions in GitHub Actions (#262)

On-behalf-of: @SAP marko.mudrinic@sap.com

Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>

Author: xmudrii

.github/workflows/auto-labeler.yml

@@ -6,6 +6,9 @@ on:
       - opened
       - synchronize
 
+permissions:
+  contents: read
+
 jobs:
   auto-labeler:
     if: github.event.pull_request.head.repo.full_name == github.repository

.github/workflows/ossf-scorecard.yml

@@ -6,6 +6,9 @@ on:
     - cron: '30 4 * * 1'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   scorecard:
     uses: platform-mesh/.github/.github/workflows/job-ossf-scorecard.yml@9ddacafbe3260312cb1cc3f9974ad2fece8effe0