Fix CI tests (#393)

* Fix `on` triggers.
* Set permissions.

Signed-off-by: SuperQ <superq@gmail.com>

Author: SuperQ

.github/workflows/ci.yml

@@ -1,6 +1,14 @@
+---
 name: CI
 on:
+  pull_request:
   push:
+    branches: [main, master, 'release-*']
+    tags: ['v*']
+
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test