set permissions

Author: braver

.github/workflows/package.yml

@@ -8,6 +8,10 @@ on:
 env:
   GITHUB_TOKEN: ${{ github.token }}
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   package:
     if: ${{ github.event_name == 'pull_request' || (github.event_name == 'issue_comment' && github.event.issue.pull_request != null && contains(github.event.comment.body, '📦')) }}