Use default token with permissions

.github/workflows/test.yml

@@ -9,17 +9,13 @@ on:
 jobs:
   build:
     runs-on: ubuntu-20.04
-
+    permissions:
+      contents: write
+      actions: write
+      attestations: write
     steps:
-      - name: Checkout with token
-        if: github.event_name != 'pull_request'
-        uses: actions/checkout@v3
-        with:
-          token: ${{ secrets.API_GITHUB_TOKEN }}
-
-      - name: Checkout without token
-        if: github.event_name == 'pull_request'
-        uses: actions/checkout@v3
+      - name: Checkout
+        uses: actions/checkout@v4
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v2
@@ -32,5 +28,3 @@ jobs:
         uses: cycjimmy/semantic-release-action@v3
         with:
           semantic_version: 17.4
-        env:
-          GITHUB_TOKEN: ${{ secrets.API_GITHUB_TOKEN }}