add read scope to workflows

Author: PssbleTrngle

.github/workflows/build.yml

@@ -11,6 +11,8 @@ jobs:
   build:
     runs-on: ubuntu-20.04
     timeout-minutes: 20
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v3
 
@@ -26,3 +28,5 @@ jobs:
         uses: gradle/gradle-build-action@v2
         with:
           arguments: build
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/sonar.yml

@@ -14,6 +14,8 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
     timeout-minutes: 40
+    permissions:
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v2