Merge pull request #100 from smallstep/panos/workflows

gh: aligned workflow permissions with smallstep/workflows#324

Author: azazeal

.github/workflows/actionci.yml

@@ -16,6 +16,7 @@ jobs:
   actionci:
     permissions:
       contents: read
+      actions: read
       security-events: write
     uses: smallstep/workflows/.github/workflows/actionci.yml@main
     secrets: inherit

.github/workflows/code-scan-cron.yml

@@ -2,12 +2,11 @@ on:
   schedule:
     - cron: '0 0 * * SUN'
 
-permissions:
-  actions: read
-  contents: read
-  security-events: write
-
 jobs:
   code-scan:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     uses: smallstep/workflows/.github/workflows/code-scan.yml@main
     secrets: inherit