Fix code scanning alert - Workflow does not contain permissions

[jakob-keller]

Description of Change

• Set minimal permissions for CI/CD GitHub workflow

Assumptions

None

Checklist for All Submissions

• I have added change info to CHANGES.rst
• If this is resolving an issue (needed so future developers can determine if change is still necessary and under what conditions) (can be provided via link to issue with these details): closes Fix code scanning alert - Workflow does not contain permissions #1332
  • Detailed description of issue
  • Alternative methods considered (if any)
  • How issue is being resolved
  • How issue can be reproduced
• If this is providing a new feature (can be provided via link to issue with these details):
  • Detailed description of new feature
  • Why needed
  • Alternatives methods considered (if any)

Checklist when updating botocore and/or aiohttp versions

• I have read and followed CONTRIBUTING.rst
• I have updated test_patches.py where/if appropriate (also check if no changes necessary)
• I have ensured that the awscli/boto3 versions match the updated botocore version
• I have added URL to diff: boto/botocore@[CURRENT_BOTO_VERSION_TAG]...[NEW_BOTO_VERSION_TAG]

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 90.83%. Comparing base (b33747e) to head (e7b6af6).
Report is 33 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1333   +/-   ##
=======================================
  Coverage   90.83%   90.83%           
=======================================
  Files          67       67           
  Lines        6559     6559           
=======================================
  Hits         5958     5958           
  Misses        601      601           

Flag	Coverage Δ
unittests	90.83% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[webknjaz]

Might be a good idea to add a zizmor workflow..

[jakob-keller]

Might be a good idea to add a zizmor workflow..

Opened as #1334

[jakob-keller]

@webknjaz: Thanks a lot for you reviews and suggestions!