Merge pull request #16 from cybozu-go/clarify-perms

clarify permissions on GitHub Actions

Author: rkwmt

.github/workflows/ci.yaml

@@ -8,6 +8,8 @@ jobs:
   test:
     name: Tests
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0

.github/workflows/release.yaml

@@ -10,6 +10,9 @@ jobs:
   release:
     name: Release login-protector
     runs-on: ubuntu-24.04
+    permissions:
+      contents: write
+      packages: write
     steps:
       - name: Checkout main branch
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2