fix: address security concerns (#4681)

pdabelf5 · pre-commit-ci[bot] · web-flow · commit 39f9fa314cd5 · 2023-11-29T18:49:16.000Z
* fix: address scope of GITHUB_TOKEN in release

---------

Co-authored-by: pre-commit-ci[bot] &lt;66853113+pre-commit-ci[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
@@ -16,8 +16,13 @@ defaults:
   run:
     shell: bash
 
+permissions:
+  contents: read
+
 jobs:
   release:
+    permissions:
+      contents: write
     runs-on: ubuntu-22.04
     steps:
       - name: Branch
