Code Scanning Alert (high): no topLevel permission defined

Remediation (click "Show more" below):

- Set top-level permissions as read-all or contents: read as described in GitHub's documentation.

- Set any required write permissions at the job-level. Only set the permissions required for that job; do not set permissions: write-all at the job level.

- To help determine the permissions needed for your workflows, you may use StepSecurity's online tool by ticking the "Restrict permissions for GITHUB_TOKEN". You may also tick the "Pin actions to a full length commit SHA" to fix issues found by the Pinned-dependencies check.

Severity: High