build: adjust permissions

Author: devpow112

.github/workflows/ci.yml

@@ -69,6 +69,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     permissions:
+      contents: read
       security-events: write
     steps:
       - name: Checkout

.github/workflows/pull-request.yml

@@ -2,6 +2,8 @@ name: Pull Request
 on:
   pull_request:
     branches: main
+permissions:
+  contents: read
 jobs:
   ci:
     name: CI
@@ -12,6 +14,9 @@ jobs:
   label:
     name: Label
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     timeout-minutes: 5
     steps:
       - name: Apply labels