Merge pull request #4337 from mapfish/add-workflow-permissions

Add workflow permissions

Author: sbrunner

.github/workflows/monthly-release.yaml

@@ -5,6 +5,9 @@ on:
     # The 10th at every month
     - cron: '0 0 10 * *'
 
+permissions:
+  contents: write
+
 jobs:
   audit:
     name: Monthly release

.github/workflows/pull-request-automation.yaml

@@ -5,6 +5,10 @@ on:
     types:
       - opened
       - reopened
+
+permissions:
+  contents: read
+
 jobs:
   auto-merge:
     name: Auto reviews pull requests from bots