chore(ci): Permissions work

Update on-merge-to-main.yml

Author: sthulb

.github/workflows/label_pr_on_title.yml

@@ -18,6 +18,8 @@ jobs:
     with:
       record_pr_workflow_id: ${{ github.event.workflow_run.id }}
       workflow_origin: ${{ github.event.repository.full_name }}
+    permissions:
+      pull-requests: read
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}
   label_pr:
@@ -40,4 +42,4 @@ jobs:
           # and label PR based on semantic title accordingly
           script: |
             const script = require('.github/scripts/label_pr_based_on_title.js')
-            await script({github, context, core})
+            await script({github, context, core})

.github/workflows/on-merge-to-main.yml

@@ -16,6 +16,7 @@ jobs:
   get_pr_details:
     if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success'
     permissions:
+      contents: read
       pull-requests: read
     uses: ./.github/workflows/reusable_export_pr_details.yml
     with: