set workflow permissions (#179)

Signed-off-by: Anton Dukhovnikov <[email protected]>

Author: antond-weta

.github/workflows/ci.yml

@@ -1,6 +1,8 @@
 # This starter workflow is for a CMake project running on multiple platforms. There is a different starter workflow if you just want a single platform.
 # See: https://github.com/actions/starter-workflows/blob/main/ci/cmake-single-platform.yml
 name: CI
+permissions:
+  contents: read
 
 on:
   push:

.github/workflows/clang-format-check.yml

@@ -1,4 +1,7 @@
 name: clang-format Check
+permissions:
+  contents: read
+
 on: [push, pull_request]
 jobs:
   formatting-check: