Disable write access to repository from CI

This follows the principle of least privilege.

Author: infertux

.github/workflows/ci.yml

@@ -4,6 +4,8 @@ on:
   push:
   pull_request:
 
+permissions: read-all
+
 jobs:
   audit:
     runs-on: ubuntu-latest