fix workflow permissions (#16)

Co-authored-by: Markus Cozowicz <eisber@eisber.net>

Author: eisber

.github/workflows/build.yaml

@@ -4,7 +4,6 @@ on: [push]
 
 permissions:
   contents: write          # This is required for actions/checkout@v1
-  security-events: write   # To upload sarif files
 
 jobs:
   build:

.github/workflows/codeql.yaml

@@ -6,6 +6,11 @@ on:
   schedule:
     - cron: '20 14 * * 1'
 
+permissions:
+  actions: read
+  contents: read
+  security-events: write   # To upload sarif files
+
 jobs:
   analyze:
     name: Analyze