github: Specify CI/PR permissions (#29)

Author: bkeryan

.github/workflows/CI.yml

@@ -8,6 +8,11 @@ on:
   workflow_call:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  checks: write
+  pull-requests: write
+
 jobs:
   check_nipanel:
     name: Check nipanel

.github/workflows/PR.yml

@@ -8,6 +8,11 @@ on:
   workflow_call:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  checks: write
+  pull-requests: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true