Merge pull request #5080 from aditya7302/fossa-token-permission

Define top level Permission for fossa.yml (FOSSA) workflow

Author: karmada-bot

.github/workflows/fossa.yml

@@ -5,6 +5,10 @@ on:
     # for PRs initiated by Dependabot.
     branches-ignore:
       - 'dependabot/**'
+
+permissions:
+  contents: read # Required by actions/checkout@v4 to fetch the repository contents.
+  
 jobs:
   fossa:
     name: FOSSA