Potential fix for code scanning alert Workflow does not contain permissions (#530)

Fix for "Workflow does not contain permissions" by adding `permissions:
contents: read`.

Author: AlexJSully

.github/workflows/code-qa.yaml

@@ -14,7 +14,7 @@ on:
             - '**/*.css'
             - '**/*.scss'
             - '**/*.html'
-            - '.github/workflows/code-qa.yml'
+            - '.github/workflows/code-qa.yaml'
     pull_request:
         branches: [main]
         paths:
@@ -28,8 +28,10 @@ on:
             - '**/*.css'
             - '**/*.scss'
             - '**/*.html'
-            - '.github/workflows/code-qa.yml'
+            - '.github/workflows/code-qa.yaml'
 
+permissions:
+    contents: read
 jobs:
     build:
         runs-on: ubuntu-latest

.github/workflows/markdown-lint.yaml

@@ -7,15 +7,17 @@ on:
             - '**/*.md'
             - '.markdownlint.json'
             - '.markdownlintignore'
-            - '.github/workflows/markdown-lint.yml'
+            - '.github/workflows/markdown-lint.yaml'
     pull_request:
         branches: [main]
         paths:
             - '**/*.md'
             - '.markdownlint.json'
             - '.markdownlintignore'
-            - '.github/workflows/markdown-lint.yml'
+            - '.github/workflows/markdown-lint.yaml'
 
+permissions:
+    contents: read
 jobs:
     lint-markdown:
         runs-on: ubuntu-latest