added empty permission set at workflow level. removed contents: write and pull-requests: write from job. added contents: read` to job.

.github/workflows/crowdin-pull.yml

@@ -6,13 +6,14 @@ on:
   schedule:
     - cron: "0 0 * * 5"
     
+permissions: {}
+
 jobs:
   crowdin-sync:
     name: Crowdin Pull - ${{ github.event_name }}
     runs-on: ubuntu-24.04
     permissions:
-      contents: write
-      pull-requests: write
+      contents: read
       id-token: write
     steps:
       - name: Checkout repo