ci: set read-only workflow token permissions

Author: Alb3e3

.github/workflows/build-and-test.yml

@@ -6,6 +6,9 @@ on:
   push:
     branches: ["master", "main", "v3"]
 
+
+permissions:
+  contents: read
 jobs:
   gradle:
     runs-on:  ubuntu-latest

.github/workflows/sca_scan.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: ["master"]
 
+
+permissions:
+  contents: read
 jobs:
   snyk-cli:
     uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main