Set permissions; do not persist credentials.

Author: BigBlueHat

.github/workflows/main.yml

@@ -1,5 +1,8 @@
 name: Generate W3C Interoperability Report
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   push:
@@ -16,6 +19,8 @@ jobs:
         node-version: [20.x]
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
@@ -47,7 +52,7 @@ jobs:
         run: npm run test
         continue-on-error: true
       - name: Deploy to Github Pages
-        uses: JamesIves/github-pages-deploy-action@4.1.5
+        uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3
         with:
           branch: gh-pages
           folder: reports