* ci: add minimum GitHub token permissions for workflows Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io> * removing actions and contents read permissions from codeql actions workflow Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io> Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io> Co-authored-by: Mattermod <mattermod@users.noreply.github.com>