Clean-up for presubmit

Author: engedaam

.github/workflows/presubmit.yaml

@@ -4,8 +4,12 @@ on:
     branches: [main]
   pull_request:
   workflow_dispatch:
+permissions:
+  contents: read
 jobs:
   presubmit:
+    permissions:
+      issues: write
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false