updated workflows for OpenSSF compilance

Author: buildslave

.github/workflows/run_ci_checks.yaml

@@ -1,13 +1,13 @@
 ---
 name: Run CI checks
-
 on:
   pull_request:
     types: "**"
     branches: "**"
   pull_request_review:
     types: "**"
     branches: "**"
+permissions: read-all
 jobs:
   TriggerWorkfows:
     uses: projectceladon/celadonworkflows/.github/workflows/trigger_ci.yml@v1.0