Potential fix for code scanning alert no. 3: Workflow does not contain permissions

[ajay-dhangar]

Potential fix for https://github.com/codeharborhub/dsa/security/code-scanning/3

To fix the problem, explicitly declare minimal GITHUB_TOKEN permissions for the build job (or at the workflow root). Since the warning is on the build job and the deploy job already defines its own permissions, the best targeted change is to add a permissions block under jobs.build. The build job needs to read repository contents (for checkout) and upload a Pages artifact. GitHub’s documentation specifies that actions/upload-pages-artifact requires pages: write, so we should grant contents: read and pages: write for this job while avoiding any broader write access like contents: write.

Concretely:

• Edit .github/workflows/deploy.yml.
• Under jobs.build, add:

    permissions:
      contents: read
      pages: write

• Place this block right after runs-on: ubuntu-latest so it clearly applies to the build job only.
  No imports or additional methods are needed since this is a YAML workflow configuration change only.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[github-actions]

Great job, @ajay-dhangar! 🎉 Thank you for submitting your pull request to CodeHarborHub. We appreciate your contribution and enthusiasm! Our team will review it soon. If you have any questions or need further assistance, feel free to reach out. Thanks for contributing!