style: fix some sonar warnings (#6370)

Author: ReenigneArcher

.github/workflows/auto-update-db.yml

@@ -57,7 +57,6 @@ jobs:
         uses: stefanbuck/github-issue-parser@v3
         id: issue-parser
         with:
-          issue-body: ${{ github.event.issue.body }}
           template-path: .github/ISSUE_TEMPLATE/theme.yml
 
       - name: Crease JSON

.github/workflows/python-tests.yml

@@ -33,7 +33,7 @@ jobs:
           python -m pip install -r requirements-dev.txt
 
       - name: Install npm dependencies
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Test with pytest
         env:

.github/workflows/update-pages.yml

@@ -1,7 +1,6 @@
 ---
 name: Update
-permissions:
-  contents: read
+permissions: {}
 
 on:
   pull_request:
@@ -24,8 +23,9 @@ concurrency:
 
 jobs:
   update:
+    permissions:
+      contents: read
     runs-on: windows-latest  # use windows because orca needs a display
-
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -62,7 +62,7 @@ jobs:
           python -m pip install -r requirements.txt
 
       - name: Install npm dependencies
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Update
         env:
@@ -114,6 +114,8 @@ jobs:
 
   call-jekyll-build:
     needs: update
+    permissions:
+      contents: read
     uses: LizardByte/LizardByte.github.io/.github/workflows/jekyll-build.yml@master
     secrets:
       GH_BOT_EMAIL: ${{ secrets.GH_BOT_EMAIL }}