Merge pull request #35 from temporalio/security-campaign/set-explicit-github-actions-permissions

VLN-478: Set explicit permissions for GitHub Actions workflows

Author: tomwheeler

.github/workflows/ci.yml

@@ -4,6 +4,8 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: read
 
 jobs:
   build-and-test:
@@ -58,4 +60,4 @@ jobs:
 
       - name: Build testing-code
         run: go build
-        working-directory: exercises/testing-code/solution/worker
+        working-directory: exercises/testing-code/solution/worker