Update ci.yml

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>

Author: sashashura

src/ci/github-actions/ci.yml

@@ -264,6 +264,9 @@ on:
     branches:
       - "**"
 
+permissions:
+  contents: read
+
 defaults:
   run:
     # On Linux, macOS, and Windows, use the system-provided bash as the default