ci: explicit set GITHUB_TOKEN permissions (#6)

Author: eroullit

starter-workflow.yml

@@ -13,6 +13,11 @@ on:
 jobs:
     spotbugs:
       runs-on: ubuntu-latest
+      permissions:
+        actions: read
+        contents: read
+        security-events: write
+        
       steps:
         - name: Checkout
           uses: actions/checkout@v3