build: less permissions #106

Job	Run time
release-info	8s
checks (check:govet)	1m 25s
checks (check:staticcheck)	1m 45s
checks (check:govulncheck)	1m 5s
checks (test)	1m 37s
checks (ci:fmt)	17s
build windows / amd64 / Nav	3m 20s
build linux / arm64 / Nav	1m 21s
build darwin / amd64 / Nav	2m 11s
build windows / amd64 / tenant	2m 41s
build linux / amd64 / Nav	1m 46s
build windows / arm64 / Nav	2m 57s
build linux / arm64 / tenant	1m 16s
build linux / amd64 / tenant	1m 44s
build windows / arm64 / tenant	2m 40s
build darwin / amd64 / tenant	2m 19s
build darwin / arm64 / Nav	3m 20s
build darwin / arm64 / tenant	2m 23s
branch-protection-checkpoint	3s
release-github	19s
release-gar (arm64, nav)	26s
release-gar (arm64, tenant)	19s
release-gar (amd64, tenant)	28s
release-external-repos (nais/scoop-bucket, naisdevice.json)	22s
release-external-repos (nais/scoop-bucket, naisdevice-tenant.json)	25s
release-external-repos (nais/homebrew-tap, Casks/naisdevice-tenant.rb)	25s
release-external-repos (nais/homebrew-tap, Casks/naisdevice.rb)	19s
release-gar (amd64, nav)	20s
	37m 41s

Provide feedback