Merge pull request #56 from trimble-oss/alert-autofix-261

Potential fix for code scanning alert no. 261: Workflow does not contain permissions

Author: joel-rieke

.github/workflows/bump-dependency.yaml

@@ -1,5 +1,10 @@
 name: Bump Deps
 
+permissions:
+  contents: read
+  pull-requests: write
+  issues: write
+
 on:
   repository_dispatch:
     types: [ bump-dependency ]

.github/workflows/test.yml

@@ -1,5 +1,7 @@
 name: Test
 on: [pull_request]
+permissions:
+  contents: read
 
 concurrency:
   group: test-${{ github.event.pull_request.number || github.ref }}