See: https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
Shengyu Zhang