add permissions

Author: yaozheng-fang

.github/workflows/push-preview-image-to-vecr.yaml

@@ -14,6 +14,10 @@
 
 name: Push Preview Image to Volcengine Container Registry
 
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/push-stable-image-to-vecr.yaml

@@ -24,6 +24,8 @@ on:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     # To avoid forked repo execute this workflow
     if: github.repository == 'volcengine/veadk-python'