ci: set explicit contents read permission in release workflow (#30)

mtmk · web-flow · commit 3fd93685a9dc · 2026-04-10T12:41:19.000+01:00
Empty permissions block relies on unauthenticated HTTPS for
checkout, which would break if the repo were ever made private.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,7 +5,8 @@ on:
     types:
       - published
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   nuget:
