fix: provide permissions

Author: unsafePtr

.github/workflows/publish-nuget.yml

@@ -25,6 +25,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
     - uses: actions/checkout@v4
@@ -67,6 +69,8 @@ jobs:
     runs-on: ubuntu-latest
     # Only publish on version tags or manual trigger with version
     if: startsWith(github.ref, 'refs/tags/v') || (github.event_name == 'workflow_dispatch' && github.event.inputs.version != '')
+    permissions:
+      contents: write
 
     steps:
     - name: Download artifacts
@@ -87,6 +91,4 @@ jobs:
       uses: softprops/action-gh-release@v2
       with:
         files: ./artifacts/*.nupkg
-        generate_release_notes: true
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        generate_release_notes: true