Potential fix for code scanning alert no. 15: Workflow does not contain permissions

[cortega26]

Potential fix for https://github.com/cortega26/polla/security/code-scanning/15

In general, this should be fixed by explicitly declaring a permissions block that grants only the minimal GITHUB_TOKEN scopes required by the workflow. Since this workflow primarily checks out code and does not appear to perform any write operations to the repository or other GitHub resources, the minimal safe baseline is contents: read. Declaring this at the workflow root will apply to all jobs (test, ingest, publish) since none currently have their own permissions block.

The best way to fix this without changing behavior is to add:

permissions:
  contents: read

near the top of .github/workflows/scrape.yml, at the root level (same indentation as on: and jobs:). This will constrain the GITHUB_TOKEN to read-only repository contents, which is sufficient for actions/checkout and other read-only operations in the current snippet. No additional imports or external methods are needed, as this is purely a workflow configuration change.

Concretely:

• Edit .github/workflows/scrape.yml.
• Insert the permissions block after the name: line and before the on: block (e.g., after line 2, preserving blank lines as appropriate).
• Do not modify any other portions of the workflow.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.