Set permissions to GITHUB_TOKEN
Hi @halseycamilla Can you please review this PR ? Thank you!
Hi, as discussed through email, this one of the [OSSF Scorecard](https://github.com/ossf/scorecard) recommendations. 

The default permissions given to GITHUB_TOKEN is write all, which can be exploited by an attacker in case of a compromised action.

To mitigate this risk it is important to [Use credentials that are minimally scoped](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-secrets).