chore: limit the permissions for the job calling the version check wo…

…rkflow

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

.github/workflows/specification-version-check.yml

@@ -6,6 +6,9 @@ name: Specification version check
 jobs:
   # Get the latest TUF specification release and open an issue (if needed)
   specification-bump-check:
+    permissions:
+      contents: read
+      issues: write
     uses: theupdateframework/specification/.github/workflows/check-latest-spec-version.yml@master
     with:
       tuf-version: "v1.0.29" # Should be updated to the according version either manually or extracted automatically as how it's done in python-tuf