CI - check permissions

[ruebenramirez]

• [ ] image should have 644 permissions
• [ ] what other permission rules should be in place?