pipe-cd/actions-gh-release Token Permissions

[abacchilb]

What would you like to be added:

In the https://github.com/pipe-cd/actions-gh-release/blob/main/README.md - document what permissions the GITHUB_TOKEN needs.

Why is this needed:

Github has updated their default token posture to only allow the token to read and not write. So now you need to set permissions above that in each job. It will be helpful to explicitly tell users what permissions are needed. ex:

permissions:
  contents: read
  issues: write
  pull-requests: write
  statuses: read
  checks: read