explicit permission

Author: anthony-mariotti

.github/workflows/release.yml

@@ -5,6 +5,9 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: read
+
 concurrency:
   group: 'release-${{ github.ref }}'
   cancel-in-progress: false
@@ -99,6 +102,7 @@ jobs:
     name: Check Release
     runs-on: ubuntu-latest
     needs: [lint, test]
+    permissions: {}
     outputs:
       prerelease: ${{ steps.check.outputs.prerelease }}
     steps: