ci: restrict token permissions and add badges to README.md

Change-Id: I057fab1370f4f3941bf3fe1de9c6d99198e3bd71
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e7188d2..20f7cb4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,9 +1,16 @@
 name: CI
 on:
   push:
-  pull_request:
+    paths-ignore:
+      - 'docs/**'
+      - '*.md'
+      - '.mailmap'
+      - '.travis.yml'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   linux:
     name: ${{ matrix.compiler }} on ${{ matrix.os }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index adccec2..9f25475 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -1,9 +1,14 @@
 name: Docs
 on:
   push:
-  pull_request:
+    paths-ignore:
+      - '.mailmap'
+      - '.travis.yml'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy:
diff --git a/README.md b/README.md
index b2b7a47..f7cc977 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,9 @@
 # NDN Essential Tools
 
-![Language](https://img.shields.io/badge/C%2B%2B-14-blue.svg)
-[![Build Status](https://travis-ci.org/named-data/ndn-tools.svg?branch=master)](https://travis-ci.org/named-data/ndn-tools)
-![Latest Version](https://img.shields.io/github/tag/named-data/ndn-tools.svg?color=darkkhaki&label=latest%20version)
+[![CI](https://github.com/named-data/ndn-tools/actions/workflows/ci.yml/badge.svg)](https://github.com/named-data/ndn-tools/actions/workflows/ci.yml)
+[![Docs](https://github.com/named-data/ndn-tools/actions/workflows/docs.yml/badge.svg)](https://github.com/named-data/ndn-tools/actions/workflows/docs.yml)
+![Language](https://img.shields.io/badge/C%2B%2B-14-blue)
+![Latest version](https://img.shields.io/github/v/tag/named-data/ndn-tools?label=Latest%20version)
 
 **ndn-tools** is a collection of basic tools for [Named Data Networking](https://named-data.net/).
 Tools in this collection include: