Set permissions in GitHub workflows

Author: chrisn

.github/workflows/node.js.yml

@@ -13,6 +13,10 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: read
+      pull-requests: read
+
     runs-on: ubuntu-latest
 
     strategy:

.github/workflows/npm-publish.yml

@@ -11,6 +11,10 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: read
+      pull-requests: read
+
     runs-on: ubuntu-latest
 
     strategy:
@@ -38,6 +42,10 @@ jobs:
       run: npm run test-node
 
   publish-npm:
+    permissions:
+      contents: read
+      pull-requests: read
+
     needs: build
     runs-on: ubuntu-latest