Merge pull request #2746 from step-security-bot/stepsecurity_remediation_1729119248

[StepSecurity] ci: Harden GitHub Actions

Author: jandubois

.github/workflows/codeql.yaml

@@ -9,6 +9,9 @@ on:
   - cron: '33 19 * * 5'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})

.github/workflows/release.yml

@@ -13,6 +13,9 @@ on:
     - 'master'
 env:
   GO111MODULE: on
+permissions:
+  contents: read
+
 jobs:
   artifacts-darwin:
     name: Artifacts Darwin