Update security.yml

Author: dthagard

.github/workflows/security.yml

@@ -6,6 +6,8 @@ on:
       - main
       - master
 
+permissions: read-all
+
 jobs:
   check-quality:
     runs-on: ubuntu-latest
@@ -60,4 +62,4 @@ jobs:
         # Run OSV Scanner and scan your dependencies
         /osv-scanner/osv-scanner --skip-git -r --experimental-only-packages --format=cyclonedx-1-5 --paths-relative-to-scan-dir  --output=sbom.json .
         # Upload results to Datadog
-        npx @datadog/datadog-ci sbom upload sbom.json
+        npx @datadog/datadog-ci sbom upload sbom.json