fix(action): use the right permissions

fix(action): use the right permissions #5