Add workflow permissions

.github/workflows/tests.yml

@@ -1,4 +1,5 @@
 name: libsigopt tests
+permissions: read-all
 run-name: ${{ github.actor }} is testing ${{ github.repository }}@${{ github.ref }}
 on:
   push: {}