Fix issues shown under 'Code scanning'

Author: PardhavMaradani

.github/workflows/deploy.yaml

@@ -8,6 +8,9 @@ on:
     types:
       - published
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.ref }}-${{ github.head_ref }}-${{ github.workflow }}
   cancel-in-progress: true

.github/workflows/gh-ci.yaml

@@ -12,6 +12,10 @@ on:
     #   (from https://help.github.com/en/actions/reference/events-that-trigger-workflows#scheduled-events-schedule)
     - cron: "0 0 * * 0"
 
+permissions:
+  contents: read
+  pull-requests: write
+
 concurrency:
   # Specific group naming so CI is only cancelled
   # within same PR or on merge to main