* build: harden update-changelog.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden tests.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * Update update-changelog.yml * Update tests.yml Co-authored-by: Dries Vints <dries@vints.io>