Update golangci-lint.yml to have minimal permission

Signed-off-by: Diogo Teles Sant'Anna <[email protected]>

.github/workflows/golangci-lint.yml

@@ -1,4 +1,3 @@
----
 # This action is synced from https:/prometheus/prometheus
 name: golangci-lint
 on:
@@ -12,8 +11,14 @@ on:
  - ".golangci.yml"
  pull_request:
 
+permissions: # added using https:/step-security/secure-repo
+ contents: read
+
 jobs:
  golangci:
+ permissions:
+ contents: read # for actions/checkout to fetch code
+ pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
  name: lint
  runs-on: ubuntu-latest
  steps:
@@ -22,11 +27,11 @@ jobs:
  - name: install Go
  uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
  with:
- go-version: 1.20.x
+ go-version: 1.21.x
  - name: Install snmp_exporter/generator dependencies
  run: sudo apt-get update && sudo apt-get -y install libsnmp-dev
  if: github.repository == 'prometheus/snmp_exporter'
  - name: Lint
  uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3.7.0
  with:
- version: v1.54.2
+ version: v1.55.2