explicitly state permissions

Co-authored-by: Daniel Kaufman <114174502+danielfromearth@users.noreply.github.com>

Author: ank1m

.github/workflows/build-pipeline.yml

@@ -17,6 +17,9 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Retrieve repository
         uses: actions/checkout@v6