Merge pull request #144 from pellared/patch-1

Update required GITHUB_TOKEN permissions

README.md

@@ -28,7 +28,7 @@ on:
 # explicitly configure permissions, in case your GITHUB_TOKEN workflow permissions are set to read-only in repository settings
 permissions:
   actions: write
-  contents: write
+  contents: write # this can be 'read' if the signatures are in remote repository
   pull-requests: write
   statuses: write