.github: workflows: build restrict permissions

Restrict default permission of the build workflows.

Signed-off-by: Thomas Stranger <[email protected]>

Author: str4t0m

.github/workflows/build.yml

@@ -6,6 +6,9 @@ on:
   schedule:
     - cron: "0 0 * * *"
 
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy:
@@ -18,6 +21,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: example-application
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5