downscope permission for python test workflow

Author: attwad

.github/workflows/python-test.yml

@@ -3,6 +3,8 @@
 
 name: Test
 
+permissions: read-all
+
 on:
   push:
     branches: [ master ]
@@ -27,7 +29,7 @@ jobs:
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        python -m pip install flake8 pytest mypy
+        python -m pip install flake8 pytest pytest-cov mypy
     - name: Lint with flake8
       run: |
         # stop the build if there are Python syntax errors or undefined names
@@ -38,3 +40,5 @@ jobs:
       run: mypy pythonosc examples
     - name: Test with pytest
       run: pytest
+    - name: Coverage with pytest-cov
+      run: pytest -cov=pythonosc