Potential fix for code scanning alert no. 9: Workflow does not contain permissions

[staal0]

Potential fix for https://github.com/cego/container-manager/security/code-scanning/9

In general, this problem is fixed by explicitly adding a permissions: block either at the root of the workflow (to apply to all jobs) or under the specific job. The block should grant only the scopes actually required by the job. For a simple build job that only checks out code and compiles it, contents: read is sufficient, because it only needs to read repository contents.

The best fix here is to add a workflow-level permissions block directly under the name: Build line in .github/workflows/build.yml. This will apply to the build job and any future jobs that don’t override permissions. We’ll set:

permissions:
  contents: read

This change does not alter any of the existing steps or functionality—checkout and build will continue to work, and the GITHUB_TOKEN will be limited to read-only access to repository contents. No additional imports, methods, or definitions are needed; it is purely a YAML configuration change in that file.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.