Potential fix for code scanning alert no. 2: Workflow does not contain permissions

[randallmorse]

Potential fix for https://github.com/lets-qa/test-runner/security/code-scanning/2

The best way to fix the problem is to explicitly specify the least permissions required for the job by adding a permissions block to the workflow. Since the job only checks out code and builds a Docker image (no steps that interact with PRs, issues, or write to the repository), the minimal permission needed is contents: read. This should be set either at the workflow root (to apply to all jobs unless overridden) or to each job that doesn't already specify permissions.

The required edit is to add the following at the root level, underneath the name: and before the on: block in .github/workflows/arm64-docker-image.yml:

permissions:
  contents: read

This requires no additional imports, definitions, or further changes.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull Request Overview

This PR adds explicit permissions to the GitHub Actions workflow to address a code scanning security alert. The change implements the principle of least privilege by specifying minimal required permissions for the workflow.

• Adds permissions block with contents: read to the ARM64 Docker image workflow
• Addresses security alert by explicitly limiting workflow permissions to only what's needed

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}