Use read permissions in GitHub workflows (#39)

GitOrigin-RevId: aa1ad11

Author: metonym

.github/workflows/go-test.yaml

@@ -1,10 +1,12 @@
 name: Go Tests
+permissions:
+  contents: read
 
 on:
   push:
-    branches: [ main ]
+    branches: [main]
   pull_request:
-    branches: [ main ]
+    branches: [main]
 
 jobs:
   test:
@@ -27,4 +29,4 @@ jobs:
         run: go build -v ./...
 
       - name: Test with the Go CLI
-        run: go test $(go list ./... | grep -v e2e)
+        run: go test $(go list ./... | grep -v e2e)

.github/workflows/mirror.yaml

@@ -1,7 +1,10 @@
 name: Mirror to Public Repository
+permissions:
+  contents: read
+
 on:
   push:
-    branches: [ main ]
+    branches: [main]
 
 jobs:
   mirror: