fix permissions for codeql-action (#3800)

Author: yaacovCR

.github/workflows/ci.yml

@@ -172,7 +172,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read # for actions/checkout
-      security-events: write
+      security-events: write # for codeql-action
     steps:
       - name: Checkout repo
         uses: actions/checkout@v3

.github/workflows/pull_request.yml

@@ -5,6 +5,7 @@ jobs:
   ci:
     permissions:
       contents: read # for actions/checkout
+      security-events: write # for codeql-action
     uses: ./.github/workflows/ci.yml
 
   dependency-review: