CI: update permissions

Author: azu

Diff for: .github/workflows/test.yml

@@ -2,6 +2,8 @@ name: test
 on: [push, pull_request]
 env:
   CI: true
+permissions:
+  contents: read
 jobs:
   test:
     name: "Test on Node.js ${{ matrix.node-version }}"