Merge pull request #55 from trimble-oss/alert-autofix-262

Potential fix for code scanning alert no. 262: Workflow does not contain permissions

Author: joel-rieke

.github/workflows/format.yml

@@ -1,5 +1,8 @@
 name: Check/Format PR
 
+permissions:
+  contents: read
+
 on:
   pull_request:
     branches: [ main ]
@@ -12,6 +15,8 @@ jobs:
   format:
     name: Format PR
     if: github.event.pull_request.head.repo.full_name == github.repository
+    permissions:
+      contents: write
     runs-on: ubuntu-22.04
     steps:
       - name: Setup Go 1.x