Github CodeScan reports errors on branch jdk17u-target8

[luchsh]

see https://github.com/bytedance/CompoundVM/security/code-scanning?page=1

[duanyangjing]

#34 Try to limit permission of github actions.