ci: Add concurrency permissions (#399)

.github/workflows/ci.yml

@@ -12,12 +12,21 @@ on:
   schedule:
     - cron: "13 13 * * *"
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+
+permissions:
+  actions: write
+  contents: write
+  deployments: write
+  pull-requests: write
+
 env:
   HUGO_CACHEDIR: /tmp/hugo_cache
 
 jobs:
   deploy:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     timeout-minutes: 3
     steps:
       - uses: actions/[email protected]
@@ -84,7 +93,7 @@ jobs:
   lighthouse:
     needs: deploy
     if: ${{ github.ref == 'refs/heads/main' }}
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     timeout-minutes: 2
     steps:
       - uses: actions/[email protected]
@@ -122,7 +131,7 @@ jobs:
           user_email: 'github-actions[bot]@users.noreply.github.com'
 
   test-docker:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     timeout-minutes: 2
     if: ${{ github.event_name == 'push' || github.event_name == 'pull_request' }}
     steps:
@@ -138,7 +147,7 @@ jobs:
       - run: make build
 
   test-setup:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     timeout-minutes: 2
     if: ${{ github.ref == 'refs/heads/main' }}
     strategy: