update permissions (#7572)

Co-authored-by: Krrish Mittal <[email protected]>

Author: takyyon

.github/workflows/codeql.yml

@@ -9,6 +9,13 @@ on:
 jobs:
   CodeQL-Build:
 
+    permissions:
+      # required for all workflows
+      security-events: write
+
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     # CodeQL runs on ubuntu-latest and windows-latest
     runs-on: ubuntu-latest