Merge pull request #294 from getyourguide/add-workflow-permissions-to-other-workflows

SEC-3057 Define other workflow permissions

Author: victorcuena

.github/workflows/publish.yml

@@ -4,6 +4,10 @@ on:
   release:
     types: [published]
 
+permissions:
+  deployments: read
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }}
   cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}