Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[dkbaldwin]

Potential fix for https://github.com/inDevelopme/flask-simwire-basic/security/code-scanning/1

To fix the problem, add a permissions block to the workflow to restrict the GITHUB_TOKEN to only the privileges it needs. In this case, since the workflow only checks out code and builds a Docker image, it only needs read access to repository contents (contents: read). This block should be added at the root of the workflow YAML file (top-level), so it applies to all jobs, unless more granular permissions are required at the job level. No imports or other changes are needed; just add the recommended block to the beginning of the YAML file, directly beneath the workflow name.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull Request Overview

This PR addresses a security alert by adding explicit GITHUB_TOKEN permissions to the Docker Image CI workflow. The change restricts the workflow's token to read-only access for repository contents, following the principle of least privilege.

Key Changes:

• Added a permissions block limiting the workflow to contents: read

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.