CCM-13343: Trivy Package and Library Scans

Author: jamesthompson26-nhs

.github/workflows/stage-1-commit.yaml

@@ -150,6 +150,7 @@ jobs:
     name: "Trivy IaC Scan"
     permissions:
       contents: read
+      packages: read
     runs-on: ubuntu-latest
     timeout-minutes: 10
     needs: detect-terraform-changes
@@ -172,6 +173,7 @@ jobs:
     name: "Trivy Package Scan"
     permissions:
       contents: read
+      packages: read
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps: