added permissions

Author: sangeet-joy_xero

.github/workflows/publish.yml

@@ -57,6 +57,8 @@ jobs:
      runs-on: ubuntu-latest
      needs: publish
      if: success()
+     permissions:
+      contents: read
      steps:
       - name: Checkout xero-pythonrepo
         uses: actions/checkout@v4
@@ -80,6 +82,8 @@ jobs:
      runs-on: ubuntu-latest
      needs: publish
      if: failure()
+     permissions:
+      contents: read
      steps:
       - name: Checkout xero-python repo
         uses: actions/checkout@v4