Merge pull request groue#1226 from turrisxyz/Pinned-Dependencies-GitHub

chore: Set permissions for GitHub actions

Author: groue

.github/workflows/CI.yml

@@ -20,6 +20,9 @@ on:
 concurrency: 
   group: ${{ github.ref_name }}
   cancel-in-progress: true
+permissions:
+  contents: read
+
 jobs:
   macOS:
     name: macOS