Remove code coverage PR comment. Refine ci permissions.

Author: jeffhandley

.github/workflows/ci.yml

@@ -6,11 +6,11 @@ on:
   pull_request:
     branches: ["main"]
 
+permissions:
+  contents: read
+
 jobs:
   build:
-    permissions:
-      contents: read
-
     strategy:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]

.github/workflows/code-coverage.yml

@@ -3,6 +3,9 @@ name: Code Coverage
 on:
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   publish-coverage:
     runs-on: ubuntu-latest
@@ -59,13 +62,6 @@ jobs:
           path: ${{ github.workspace }}/code-coverage-results.md
           retention-days: 7
 
-      - name: Add Coverage PR Comment
-        uses: marocchino/sticky-pull-request-comment@v2
-        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
-        with:
-          recreate: true
-          path: ${{ github.workspace }}/code-coverage-results.md
-
       - name: Coverage on step summary
         if: always()
         run: cat "${{ github.workspace }}/report/SummaryGithub.md" >> $GITHUB_STEP_SUMMARY