Potential fix forhttps://github.com/github/gemoji/security/code-scanning/2

The ideal fix is to add an explicitpermissions block to the workflow to restrict the GITHUB_TOKEN to only the minimal necessary permissions required by the workflow. In general, for a typical test job that checks out code and runs tests, onlycontents: read is needed. The fix should be made near the top level of the workflow file, either at the root level (so it applies to all jobs), or specifically under thetest job if only that job should be restricted. For this workflow file, the recommended way is to add the permissions at the workflow root, directly after the workflow name and before theon keyword, to cover all jobs in the workflow. No additional imports or method definitions are required.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.