ci: update Differential ShellCheck

Run on pushes and drop unnecessary write access.

Should avoid pull-requests comments like
https://github.com/shadow-maint/shadow/pull/695#issuecomment-1491876950

diff --git a/.github/workflows/static-code-analysis.yml b/.github/workflows/static-code-analysis.yml
index 10dab8cede3479423fb8ec9365dd602efd2492d7..c0741bee103e64f3bc92a0b59a5d90a1b74fdc34 100644 (file)
--- a/.github/workflows/static-code-analysis.yml
+++ b/.github/workflows/static-code-analysis.yml
@@ -38,13 +38,11 @@ jobs:
       uses: github/codeql-action/analyze@v2
 
   differential-shellcheck:
-    if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
 
     permissions:
       contents: read
       security-events: write
-      pull-requests: write
 
     steps:
       - name: Checkout repository