Specify permissions for golangci-lint-action

.github/workflows/ci.yml

@@ -48,6 +48,13 @@ jobs:
   lint:
     name: lint
     runs-on: ubuntu-latest
+    permissions:
+      # Required: allow read access to the content for analysis.
+      contents: read
+      # Optional: allow read access to pull request. Use with `only-new-issues` option.
+      pull-requests: read
+      # Optional: Allow write access to checks to allow the action to annotate code in the PR.
+      checks: write
     steps:
       - uses: actions/checkout@v4
       - name: Set up Go