Updated CodeQL action

Author: hknokh

.github/workflows/codeql-analysis.yml

@@ -1,5 +1,8 @@
 name: "CodeQL"
 
+permissions:
+  contents: read  # Default read-only at the top level  
+
 on:
   push:
     branches: [ master ]
@@ -13,6 +16,7 @@ on:
     - cron: '0 14 * * 0'  # Schedule a weekly run
   workflow_dispatch:  # Allows the workflow to be run manually
 
+  
 jobs:
   analyze:
     name: Analyze