fix: add security-events write permission for Trivy SARIF upload

Author: d3v07

.github/workflows/graph-updater.yml

@@ -181,6 +181,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      security-events: write
 
     outputs:
       image_tag: ${{ steps.meta.outputs.tags }}