fix: GitHub check run permissions (#68)

.github/actions/setup/action.yml

@@ -10,17 +10,18 @@ runs:
         override: true
         components: rustfmt, clippy, llvm-tools-preview
 
-    # example: https://github.com/actions/cache/blob/main/examples.md#rust---cargo
     # needed dirs: https://doc.rust-lang.org/cargo/guide/cargo-home.html#caching-the-cargo-home-in-ci
-    - name: Cache cargo system
+    - name: Cache Cargo System (cargo install)
       uses: actions/cache@v3
       with:
         path: |
           ~/.cargo/.crates.toml
           ~/.cargo/.crates2.json
           ~/.cargo/bin/
         key: cargo-system-${{ runner.os }}-${{ hashFiles('~/.cargo/.crates.toml', '~/.cargo/.crates2.json') }}
-    - name: Cache cargo repo
+
+    # example: https://github.com/actions/cache/blob/main/examples.md#rust---cargo
+    - name: Cache Cargo Repo (cargo install)
       uses: actions/cache@v3
       with:
         path: |
@@ -29,4 +30,3 @@ runs:
           ~/.cargo/git/db/
           target/
         key: cargo-repo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
-

.github/workflows/ci.yml

@@ -1,8 +1,10 @@
 name: CI
+
 on:
   push:
     branches:
       - main
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -41,4 +43,3 @@ jobs:
       - name: Upload coverage to Coveralls
         uses: coverallsapp/github-action@v2.2.3
         if: always()
-

.github/workflows/pr.yml

@@ -1,9 +1,14 @@
 name: PR
+
 on:
   pull_request:
+
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       # setup
       - name: Checkout Repo