Potential fix for code scanning alert no. 3: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: legrego

.github/workflows/coverage-comment.yml

@@ -1,5 +1,8 @@
 ---
     name: Comment coverage report on the pull request
+    permissions:
+      contents: read
+      pull-requests: write
     on:
       workflow_run:
         workflows: ["Pull actions"]