Potential fix for code scanning alert no. 25: Workflow does not contain permissions

[AndresMaqueo]

Potential fix for https://github.com/AndresMaqueo/codeql-coding-standards/security/code-scanning/25

To fix the problem, we should add a permissions: block at the top level of the workflow file. This block should specify only the required privileges, generally starting with minimal permissions such as contents: read, which allows the jobs to check out code, read files, and perform CI steps, but not to push, open PRs, or alter repository state. We add the block immediately under the workflow name (before the on: trigger). No additional imports or code changes are needed elsewhere.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull Request Overview

This PR addresses a security vulnerability by adding proper permissions configuration to a GitHub Actions workflow. The fix adds minimal required permissions to prevent the workflow from having excessive privileges.

• Adds permissions block with contents: read to limit workflow privileges
• Addresses code scanning alert about missing workflow permissions
• Implements security best practice of least privilege access

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}