Note for GitHub Workflows

The GH_TOKEN available in this repository as readonly permissions by default. If more permissions are required, they need to be configured in the workflow definition.

Rationale
This is something we want to put in place for all repositories of the organization

As a good security practice, you should always make sure that actions only have the minimum access they require by limiting the permissions granted to the GITHUB_TOKEN

Source: GitHub documentation