Merge pull request #30 from reload/alert-autofix-1

Potential fix for code scanning alert no. 1: Workflow does not contain permissions

Author: arnested

.github/workflows/yaml.yml

@@ -1,6 +1,8 @@
 ---
 on: pull_request
 name: YAML
+permissions:
+  contents: read
 
 # Detect if this action is already running, and cancel it.
 # This most likely happened because a second push has been made to a branch.