Move write permissions to the specific job, rather than globally

Signed-off-by: Justin Abrahms <[email protected]>

Author: justinabrahms

.github/workflows/merge.yml

@@ -12,13 +12,14 @@ on:
     branches: [ master, main ]
 
 permissions:
-  packages: write
   contents: read
 
 jobs:
   build:
 
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
 
     steps:
     - uses: actions/checkout@v3

.github/workflows/pullrequest.yml

@@ -3,7 +3,6 @@ on:
   pull_request:
     branches: [ master, main ]
 permissions:
-  packages: write
   contents: read
 
 jobs:
@@ -15,6 +14,8 @@ jobs:
         ports:
           - 8013:8013
 
+    permissions:
+      packages: write
     steps:
       - name: Check out the code
         uses: actions/checkout@v3