Merge pull request apigee#285 from shailesh-google/security-scan-code-update

Add permissions to PHP workflow and added 'justinrainbow/json-schema:^6.5.1'

Author: shailesh-google

.github/workflows/php.yml

@@ -23,7 +23,10 @@ jobs:
   build:
 
     runs-on: ubuntu-24.04
-    
+    permissions:
+      contents: read
+      security-events: write
+      
     name: "PHP ${{ matrix.php-version }} | Drupal ${{ matrix.drupal-core }}"
     strategy:
       fail-fast: false
@@ -78,6 +81,7 @@ jobs:
     - name: "Allow plugins and dev dependencies"
       run: |
         cd drupal
+        composer require "justinrainbow/json-schema:^6.5.1" --no-update
         composer config --no-plugins allow-plugins.composer/installers true
         composer config --no-plugins allow-plugins.drupal/core-composer-scaffold true
         composer config --no-plugins allow-plugins.drupal/core-project-message true