Potential fix for code scanning alert no. 8: Workflow does not contain permissions (#13670)

* Potential fix for code scanning alert no. 8: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Glenn Jocher <[email protected]>

* Update merge-main-into-prs.yml

Signed-off-by: Glenn Jocher <[email protected]>

---------

Signed-off-by: Glenn Jocher <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: glenn-jocher

.github/workflows/merge-main-into-prs.yml

@@ -5,6 +5,10 @@
 
 name: Merge main into PRs
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   workflow_dispatch:
   # push: