feat: set permissions to ci.yml (#492)

Signed-off-by: Joyce <joycebrum@google.com>
1 file changed