Merge pull request swiftlang#1188 from incertum/chore/workflow-permissions

chore: restrict GitHub workflow permissions - future-proof

Author: shahmishal

.github/workflows/ci.yaml

@@ -1,7 +1,12 @@
 name: test
+
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
+
 on:
   pull_request: { types: [opened, reopened, synchronize, ready_for_review] }
   push: { branches: [ main ] }