Include necessary permission to upload results.

GitHub requires write permission to `security-events` to upload analysis results to code scanning.

https://docs.github.com/en/rest/code-scanning#upload-an-analysis-as-sarif-data

Author: chungyc

.github/workflows/hlint.yml

@@ -18,6 +18,9 @@ jobs:
   hlint:
     name: HLint
     runs-on: ubuntu-latest
+    permissions:
+      # Needed to upload results to GitHub code scanning.
+      security-events: write
     steps:
     - uses: actions/checkout@v3
     - name: Check site.hs with hlint