ci: scope down permissions for codeql-analysis.yml

Author: AdnaneKhan

.github/workflows/codeql-analysis.yml

@@ -15,6 +15,9 @@ on:
   push:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     # This repository only have Java and Rust code. Rust is not supported currently.