This limits the damage that a compromised GitHub action could do. See https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
* [CI] Fix commit message length check * [CI] Smarter commit message length check * [CI] Fix commit message length check for new branches * [CI] Output offending commits