Assigning permissions to jobs - GitHub Docs
Modify the default permissions granted to GITHUB_TOKEN.