Merge pull request #144 from devops-actions/rajbos-patch-1

Update top level GITHUB_TOKEN permissions the minimum level

Author: rajbos

.github/workflows/test.yml

@@ -7,7 +7,7 @@ on: # rebuild any PRs and main branch changes
       - 'releases/*'
 
 permissions:
-  read
+  contents: read
 
 jobs:
   build: # make sure build/ci works properly