security: set default workflow permissions to read-all

The sync workflow should explicitly define the permissions write
on contents

Closes #8

Signed-off-by: Jonathan Gonzalez V. <[email protected]>

Author: sxd

.github/workflows/sync.yaml

@@ -10,6 +10,8 @@ on:
   repository_dispatch:
     types: [ sync-api ]
 
+permissions: read-all
+
 jobs:
   sync:
     runs-on: ubuntu-latest