include actions:read for all code scanning workflows

code-scanning/codeql.yml

@@ -25,6 +25,7 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
     permissions:
+      actions: read
       contents: read
       security-events: write
 

code-scanning/kubesec.yml

@@ -19,6 +19,7 @@ jobs:
     name: Kubesec
     runs-on: ubuntu-20.04
     permissions:
+      actions: read
       contents: read
       security-events: write
     steps:

code-scanning/mayhem-for-api.yml

@@ -38,6 +38,7 @@ jobs:
     # Mayhem for API runs on linux, mac and windows
     runs-on: ubuntu-latest
     permissions:
+      actions: read
       contents: read
       security-events: write
     steps:

code-scanning/synopsys-io.yml

@@ -19,6 +19,7 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
     permissions:
+      actions: read
       contents: read
       security-events: write
     

code-scanning/tfsec.yml

@@ -18,6 +18,7 @@ jobs:
     name: Run tfsec sarif report
     runs-on: ubuntu-latest
     permissions:
+      actions: read
       contents: read
       security-events: write