update permissions

Author: anthony-nhs

.github/workflows/ci.yml

@@ -17,6 +17,8 @@ jobs:
     quality_checks:
         uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@68c2dea999875055ecbfdf055d8391e6e8b8ce2f
         needs: [get_config_values]
+        permissions:
+            contents: "read"
         with:
             pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
         secrets:

.github/workflows/pull_request.yml

@@ -26,6 +26,8 @@ jobs:
     quality_checks:
         uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@68c2dea999875055ecbfdf055d8391e6e8b8ce2f
         needs: [get_config_values]
+        permissions:
+            contents: "read"
         with:
             pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
         secrets:

.github/workflows/release.yml

@@ -18,6 +18,8 @@ jobs:
     quality_checks:
         uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@68c2dea999875055ecbfdf055d8391e6e8b8ce2f
         needs: [get_config_values]
+        permissions:
+            contents: "read"
         with:
             pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
         secrets: