ci: specify permissions

Author: yoshinorin

.github/workflows/ci.yml

@@ -43,6 +43,8 @@ jobs:
           path: ./report
   build:
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     strategy:
       matrix:
         os: [ubuntu-latest]