Merge pull request #17 from DFanso/alert-autofix-1

Potential fix for code scanning alert no. 1: Workflow does not contain permissions

Author: DFanso

.github/workflows/build-and-release.yml

@@ -43,6 +43,8 @@ jobs:
 
   build:
     name: Build Go Binary
+    permissions:
+      contents: read
     runs-on: ${{ matrix.os }}
     needs: auto-tag
     # Always run build, even if auto-tag was skipped (e.g., for tag pushes)