Add permissions to workflows (#203)

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Author: gaborbernat

.github/workflows/check.yaml

@@ -10,6 +10,8 @@ on:
 concurrency:
   group: check-${{ github.ref }}
   cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/release.yaml

@@ -2,6 +2,8 @@ name: Release to PyPI
 on:
   push:
     tags: ["*"]
+permissions:
+  contents: read
 env:
   dists-artifact-name: python-package-distributions
 jobs: