Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[Skyfall1235]

Potential fix for https://github.com/Skyfall1235/RandomCodeAPI/security/code-scanning/1

To fix the problem, add an explicit permissions block to the workflow. This block can be set globally at the root (so all jobs inherit the same permissions by default) or scoped to the relevant job. The minimal safe permission for CodeQL analysis jobs is usually contents: read, unless uploading results to security features, in which case additional permissions (like security-events: write) may be needed. The best approach is to add permissions at the top after the workflow name but before or after the on: block, so it applies globally. No functionality will be affected, and the GITHUB_TOKEN will have only the minimal required permissions.

Required change:

• Insert the following after the workflow name:

  permissions:
    contents: read
    security-events: write

• This ensures CodeQL can upload its results (which uses security-events: write) but will not have unnecessary extra write access.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.