Potential fix for code scanning alert no. 2: Workflow does not contain permissions

[zeyus]

Potential fix for https://github.com/zeyus/Python3BlueBox/security/code-scanning/2

To fix the problem, you should add a permissions block that limits the available permissions for this workflow. The best practice is to assign only the privileges required for the actions and steps in the workflow. Since this workflow mostly installs dependencies, runs linters, and runs tests—all locally and not interacting with the repository contents except possibly for reading source code—the minimal starting point is contents: read. This should be added either at the root level (to apply to all jobs) or within the build job. The safest place is at the root level, immediately after the name and before the on block.

Change details:

• Edit .github/workflows/codetest.yml
• Insert the following block after name: Lint, test and notify and before on: [push]:

  permissions:
    contents: read

No imports or definitions are needed.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.