Update workflow permisions

Signed-off-by: Karel Blavka <karel.blavka@hardwario.com>

Author: blavka

.github/workflows/main.yml

@@ -1,6 +1,15 @@
-name: Main
+name: Test
 
-on: [push]
+on:
+  push:
+    paths-ignore:
+      - '**/README.md'
+      - '.*'
+  pull_request:
+    types: [opened, synchronize]
+
+permissions:
+  contents: read
 
 defaults:
   run:

.github/workflows/publish.yml

@@ -1,8 +1,16 @@
 name: Upload Python Package
 
 on:
-  release:
-    types: [published]
+  push:
+    tags:
+      - 'v*.*.*'
+
+defaults:
+  run:
+    shell: bash
+
+permissions:
+  contents: write
 
 jobs:
   deploy: