ci: fix permission issue

Author: evansims

.github/workflows/container.yml

@@ -221,6 +221,9 @@ jobs:
     needs: merge
     runs-on: ubuntu-latest
     if: github.event_name != 'pull_request'
+    permissions:
+      contents: read
+      security-events: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1