Release Workflow is missing Read Permissions

[Finwood]

For a private repository, the release workflow is missing the contents: read permission:

trusted-publishing-examples/.github/workflows/release.yml

Lines 17 to 18 in 24971e1

	permissions:
	id-token: write

With the added permission, the workflow also works on private repos:

jobs:
  pypi:
    permissions:
      contents: read
      id-token: write

At least for me, but maybe I was missing something... 🤔

[konstin]

According to https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication#permissions-for-the-github_token, contents: read is already the default permission for github actions, is there anything else you are setting that might cause the workflow to not have read permissions?