Assigning permissions to jobs - GitHub Docs

Modify the default permissions granted to GITHUB_TOKEN.