ci(action): Assign permission as low as possible

Signed-off-by: Joas Schilling <coding@schilljs.com>

.github/workflows/static-code-analysis.yml

@@ -15,7 +15,6 @@ on:
 
 permissions:
   contents: read
-  security-events: write
 
 concurrency:
   group: static-code-analysis-${{ github.head_ref || github.run_id }}
@@ -59,6 +58,9 @@ jobs:
 
     if: ${{ github.repository_owner != 'nextcloud-gmbh' }}
 
+    permissions:
+      security-events: write
+
     steps:
       - name: Checkout code
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8