Update workflow permissions

Author: Reobos

.github/workflows/cmake-single-platform.yml

@@ -1,6 +1,9 @@
 # This starter workflow is for a CMake project running on a single platform. There is a different starter workflow if you need cross-platform coverage.
 # See: https://github.com/actions/starter-workflows/blob/main/ci/cmake-multi-platform.yml
 name: CMake on a single platform
+permissions:
+  contents: read
+  pull-requests: write
 
 on:
   push:

.github/workflows/codeql.yml

@@ -71,6 +71,8 @@ jobs:
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
+        packs: codeql/misra-cpp-coding-standards,codeql/common-cpp-coding-standards
+        # config-file: ./.github/codeql/codeql-config.yml
         # If you wish to specify custom queries, you can do so here or in a config file.
         # By default, queries listed here will override any specified in a config file.
         # Prefix the list here with "+" to use these queries and those in the config file.

.github/workflows/sonar-build.yml

@@ -1,4 +1,7 @@
 name: SonarQube
+permissions:
+  contents: read
+  pull-requests: write
 on:
   push:
     branches: