Restrict permissions to github token for workflows (#2821)

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>

.github/workflows/reusable_workflow_trivy-scan.yaml

@@ -12,15 +12,15 @@ on:
         type: boolean
         default: false
 
+permissions:
+  contents: read
+  # needed for trivy scans upload
+  security-events: write
+
 jobs:
   trivy-scan:
     runs-on: ubuntu-latest
 
-    permissions:
-      contents: read
-      # needed for trivy scans upload
-      security-events: write
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v5