chore: permissions for test ci

Author: harlan-zw

.github/workflows/test.yml

@@ -1,12 +1,14 @@
 name: Test
 
+permissions: {contents: read}
+
 on:
   push:
     branches:
       - main
     paths-ignore:
       - '**/README.md'
-  pull_request:
+  pull_request_target:
     branches:
       - main