Merge pull request #33 from CycloneDX/chore/gh-workflow-permissions

chore: GH workflow permissions

Author: jkowalleck

.github/workflows/ruby.yml

@@ -7,6 +7,9 @@ on:
   pull_request:
   workflow_dispatch:
 
+# see https://docs.github.com/en/actions/how-tos/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest