Update main.yml

fixing openssf scorecard item on token permissions.

.github/workflows/main.yml

@@ -2,6 +2,8 @@
 
 name: CI
 
+permissions: read-all
+
 # Controls when the workflow will run
 on:
   # Triggers the workflow on push or pull request events but only for the "devel" branch