Add permissions to workflow

[mkmer]

CodeQL recommendation.

Summary by CodeRabbit

• Chores
  • Updated workflow permissions configuration for the build and package publishing process.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 0d7be64f-3cb7-44de-b405-c5c8db2c83e2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch CodeQL-notes

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/workflows/make_and_publish_pkgs.yml:
- Around line 2-4: In the permissions block of the workflow
(.github/workflows/make_and_publish_pkgs.yml) remove the unnecessary
"pull-requests: write" permission so only "contents: read" remains; locate the
permissions stanza that currently contains "contents: read" and "pull-requests:
write" and delete the "pull-requests: write" line to tighten token scope for
this reusable workflow.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 6b08b015-2f32-4ebd-94a1-5a0dcb52b0a8

📥 Commits

Reviewing files that changed from the base of the PR and between 71c17ba and 623905f.

📒 Files selected for processing (1)

• .github/workflows/make_and_publish_pkgs.yml