Merge pull request #141 from aurelianware/alert-autofix-8

Potential fix for code scanning alert no. 8: Workflow does not contain permissions

Author: aurelianware

.github/workflows/deploy.yml

@@ -17,6 +17,8 @@ jobs:
     needs: pre-approval-checks
     if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     environment:
       name: PROD-approval
       url: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}