ci: apply least privilege principle (#3024)

Signed-off-by: naveensrinivasan <[email protected]>

Author: naveensrinivasan

.github/workflows/docker-image-check.yml

@@ -5,8 +5,13 @@ on:
   schedule:
     - cron:  '30 4 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   build:
+    permissions:
+      contents: none
     runs-on: ubuntu-latest
     steps:
       - name: Run Trivy vulnerability scanner

.github/workflows/nodejs.yml

@@ -11,6 +11,9 @@ on:
 env:
   CYPRESS_CACHE_FOLDER: cypress/cache
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest