Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[SilanHe]

Potential fix for https://github.com/aws/aws-durable-execution-sdk-python-testing/security/code-scanning/1

To resolve the problem, add a permissions block to the workflow to explicitly set the minimal required GitHub token permissions. Because the workflow does not perform any write operations (to contents, issues, pull-requests, etc.), it is sufficient to give read-only access to repository contents. Place the permissions block at the top level of the workflow, directly below the name field (affecting all jobs in the workflow), as recommended by GitHub best practices.

What to do:

• Edit .github/workflows/ci.yml.
• Add:

  permissions:
    contents: read

  after the name property and before the on property.
• No additional imports or variable definitions are needed.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.