Been waiting for this. Planning to add this to all my GitHub Action workflows to identify minimum permission required.

https://github.blog/2023-06-26-new-tool-to-secure-your-github-actions/ #GitHubActions

New tool to secure your GitHub Actions - The GitHub Blog

Introducing a new tool to monitor and control the permissions of the repository token for GitHub Actions.

The GitHub Blog