CI: Add 'permissions' to coverity.yml

GitHub's actions/checkout@v6 is documented to need 'contents: read' but
it works without it too, probably because the repository is public.

Reported-by: GitHub user Alb3e3
Fixes: https://github.com/tukaani-project/xz/pull/230

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 579ac559929818303aa1917e20042b5b1462c9ad..7e829ab9a6d40ad1c82b811f0e01b7a54bd80751 100644 (file)
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -8,6 +8,8 @@ on:
   push:
     branches: [coverity_scan]
 
+permissions: {}
+
 jobs:
   coverity:
     runs-on: ubuntu-latest