We are excited to release a public beta of actions-permissions, a tool which monitors your GitHub Actions workflows and recommends the minimum permissions required to run them. Every GitHub workflow receives a temporary repository access token (GITHUB_TOKEN).

Source: Github