Merge pull request #68 from microsoft/feature/wf-permissions

 - adds permissions to workflows

Author: baywet

.github/workflows/sonarcloud.yml

@@ -9,6 +9,10 @@ on:
     types: [opened, synchronize, reopened]
     paths-ignore: ["**.md", ".vscode/**", "**.svg"]
 
+permissions:
+  contents: read
+  pull-requests: read
+
 env:
   SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}