Update ci.yml - explicit contents read permission (#63)

.github/workflows/ci.yml

@@ -1,27 +1,24 @@
 name: CI
-
 on:
   # We run the CI checks on any pull request updates or pushes to the main branch after PR merge.
   pull_request:
   push:
     branches:
       - main
-
+permissions:
+  contents: read
 jobs:
   ci:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-
       - uses: actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
           check-latest: true
-
       - run: |
           go vet ./...
           go test ./... --cover
-
       - name: Install license check tool
         run: go install github.com/google/addlicense@latest
       - name: Check licenses