Merge pull request #13348 from robertsirc/fixing-gh-actions-permissions

Fixing gh actions permissions

.github/workflows/govulncheck.yml

@@ -6,6 +6,8 @@ on:
   schedule:
     - cron: "0 0 * * *"
 
+permissions: read-all
+
 jobs:
   govulncheck:
     name: govulncheck

.github/workflows/release.yml

@@ -7,6 +7,8 @@ on:
     branches:
       - main
 
+permissions: read-all
+
 # Note the only differences between release and canary-release jobs are:
 # - only canary passes --overwrite flag
 # - the VERSION make variable passed to 'make dist checksum' is expected to