Restrict GHA to contents: read permission
#130
+3
−0
contents: read permission
#130