ci(publish): security update at publish.yml

[JRocabruna]

Description

Restrict 'packages: write' permission to publish job in publish.yml

• Set top-level permissions to 'contents: read' to follow the principle of least privilege.

• Scoped 'packages: write' permission to the 'publish' job to reduce security risks.

• Align workflow with GitHub's recommended security best practices.

• Related Issue: Closes [Security] - Restrict 'packages: write' Permission to Specific Job in publish.yml Workflow #9

• Type of Change:

  • Bug fix (non-breaking change that fixes an issue)

Checklist

Please ensure the following guidelines are met:

• The code follows the style guidelines of this project.
• A self-review has been performed on the code.
• The code is well-documented, and comments have been added where necessary.
• Tests have been added to prove that the fix is effective or that the feature works. All existing tests pass.
• Commit messages follow the convention type(scope): description.
• The pull request has no conflicts with the base branch.
• Any dependent changes have been merged and published in downstream modules.

Additional Information

Please provide any additional information or context here. If applicable, add screenshots to help explain the changes.

[DarkRockMountain-admin]

Comments

The update to restrict 'packages: write' permission to the publish job in publish.yml enhances the security of the workflow by adhering to the principle of least privilege.

Review Checklist

• Code adheres to the project's coding guidelines.
• Changes are well-documented.
• Tests have been added/updated and pass successfully.
• Commit messages follow the correct format: type(scope): description.
• No conflicts with the base branch.

Approval

Approved: Changes look good and meet the project's contribution standards.