adding some permissions

Signed-off-by: Bettina Heim <[email protected]>

.github/workflows/codeql.yml

@@ -30,9 +30,10 @@ jobs:
     runs-on: 'ubuntu-latest'
     permissions:
       security-events: write
-      # required to fetch internal or private CodeQL packs
-      # packages: read
-
+      # read permissions below are only required for workflows in private repositories
+      actions: read
+      contents: read
+
     strategy:
       fail-fast: false
       matrix: