Switch from permissive to restricted workflow permissions for the (ephemeral) GITHUB_TOKEN.

[Build]

Author: lemmy

.github/workflows/main.yml

@@ -10,7 +10,10 @@ jobs:
   build:
 
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: write # Required by actions/create-release@v1
+      packages: read
+ 
     steps:
     - uses: actions/checkout@v2
     - name: Setup tmate session
@@ -84,4 +87,4 @@ jobs:
         token: ${{ secrets.REPO_DISPATCH_TOKEN }}
         repository: tlaplus/tlaplus
         event-type: tlaplus-dispatch
-        client-payload: '{"source": "CommunityModules"}'
+        client-payload: '{"source": "CommunityModules"}'