added permissions

Author: sangeet-joy_xero

.github/workflows/publish.yml

@@ -61,6 +61,8 @@ jobs:
       runs-on: ubuntu-latest
       needs: publish
       if: success()
+      permissions:
+        contents: read
       steps:
         - name: Checkout Xero-Java repo
           uses: actions/checkout@v4
@@ -84,6 +86,8 @@ jobs:
       runs-on: ubuntu-latest
       needs: publish
       if: failure()
+      permissions:
+        contents: read
       steps:
         - name: Checkout Xero-Java repo
           uses: actions/checkout@v4