update permissions

Author: sthulb

.github/workflows/security-branch-protections.yml

@@ -14,11 +14,13 @@ name: Alert Changed Branch Protections
 run-name: Alert Changed Branch Protections
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   check-branch-protections:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     environment: Security
     if: github.repository == 'aws-powertools/powertools-lambda-java'
     strategy:

.github/workflows/security-dependencies-check.yml

@@ -16,6 +16,7 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       pull-requests: write
     steps:
       - name: 'Checkout Repository'