update workflow permissions

Author: anweiss

.github/workflows/ci.yml

@@ -21,6 +21,9 @@ on:
       - "tests/**"
 
 name: Build and Test
+permissions:
+  contents: read
+  pull-requests: write
 
 jobs:
   minimum-version-check:

.github/workflows/publish-website.yml

@@ -1,4 +1,7 @@
 name: Publish website
+permissions:
+  contents: read
+  pull-requests: write
 on:
   workflow_dispatch:
 

.github/workflows/publish.yml

@@ -1,4 +1,7 @@
 name: Publish packages
+permissions:
+  contents: read
+  pull-requests: write
 on:
   release:
     types: [published]

.github/workflows/release-cddl.yml

@@ -1,4 +1,7 @@
 name: Draft release
+permissions:
+  contents: read
+  pull-requests: write
 on:
   push:
     branches:

.github/workflows/release-vscode-extension.yml

@@ -1,4 +1,7 @@
 name: Draft release for VSCode Extension
+permissions:
+  contents: read
+  pull-requests: write
 on:
   push:
     branches: