chore: add ci permissions

.github/workflows/auto-assign.yml

@@ -3,6 +3,11 @@ on:
   # pull_request_target is needed instead of just pull_request
   # because repository write permission is needed to assign reviewers
   pull_request_target:
+
+permissions:
+  contents: read          # to read changed files
+  issues: write           # to read/write issue assignees
+  pull-requests: write    # to read/write PR reviewers
 
 jobs:
   run_self:

README.md

@@ -48,6 +48,11 @@ on:
   # the github token will not have sufficient permission to update the PR.
   pull_request_target:
 
+permissions:
+  contents: read          # to read changed files
+  issues: write           # to read/write issue assignees
+  pull-requests: write    # to read/write PR reviewers
+
 jobs:
   run_self:
     runs-on: ubuntu-latest

src/main.ts

@@ -14,8 +14,8 @@ async function main() {
 
     const { base, head } = getRefs();
 
-    core.debug(`Base commit: ${base}`)
-    core.debug(`Head commit: ${head}`)
+    core.debug(`Base commit: ${base}`);
+    core.debug(`Head commit: ${head}`);
 
     const configFile = await loadYaml(client, head, ownerFilePath);
     const config = validateConfig(configFile);