Update permissions for the compose actions
Merge pull request #412 from meyerbaptiste/patch-compose-permissions

[Security] Update permissions for the compose actions