Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[RumenDamyanov]

Potential fix for https://github.com/RumenDamyanov/php-sitemap/security/code-scanning/1

To fix the problem, you should add a permissions block to the workflow file, specifying the least privilege required for the workflow to function. The best way to do this is to add the permissions key at the root level of the workflow (before jobs:), so it applies to all jobs unless overridden. For most CI workflows, contents: read is sufficient, unless a step requires additional permissions (e.g., creating pull requests, writing to issues, etc.). In this workflow, none of the steps appear to require write access, so contents: read is appropriate. You should insert the following block after the workflow name and before the on: block:

permissions:
  contents: read

No additional imports, methods, or definitions are needed.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️

[Copilot]

Pull Request Overview

This PR adds a permissions block to the GitHub Actions CI workflow to address a security code scanning alert by implementing the principle of least privilege.

Changes

• Adds explicit contents: read permission to the CI workflow file