Set minimal permisisions at golangci-lint.yml

Implemented as discussed at prometheus#1294 and already implemented at prometheus/prometheus

Signed-off-by: Diogo Teles Sant'Anna <[email protected]>

.github/workflows/golangci-lint.yml

@@ -12,8 +12,14 @@ on:
  - ".golangci.yml"
  pull_request:
 
+permissions: # added using https:/step-security/secure-repo
+ contents: read
+
 jobs:
  golangci:
+ permissions:
+ contents: read # for actions/checkout to fetch code
+ pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
  name: lint
  runs-on: ubuntu-latest
  steps: