Add permissions to workflows

Author: markdingo

.github/workflows/codecov.yml

@@ -7,6 +7,11 @@ jobs:
   test:
     name: Run tests and collect coverage
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/go.yml

@@ -10,6 +10,11 @@ jobs:
         go: [ 1.19.x ]
     runs-on:
       - ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
     steps:
       - name: Set up Go
         uses: actions/setup-go@v3