ci: add job permissions to enable sec scan upload

[derrabauke]

Check docs for necessary permissions:
https://github.com/adfinis/container-scanning-action

[open-dynaMIX]

I don't know much about the exact needed perms. But I know in mySAGW we're doing the same, but with contents: none.

[derrabauke]

I don't know much about the exact needed perms. But I know in mySAGW we're doing the same, but with contents: none.

I think you are right. -> updated to content: none

[c0rydoras]

https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#permissions

Work with the contents of the repository. For example, contents: read permits an action to list the commits, and contents: write allows the action to create a release.

[c0rydoras]

I don't think it matters for public repositories

[derrabauke]

https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#permissions

Work with the contents of the repository. For example, contents: read permits an action to list the commits, and contents: write allows the action to create a release.

As we do all the release related stuff manually we don't need any content permission I 'd say.