Potential fix for code scanning alert no. 4: Workflow does not contain permissions

[tomersein]

Potential fix for https://github.com/MustacheCase/zanadir/security/code-scanning/4

To fix the issue, add a permissions block at the root of the workflow file. This block will apply to all jobs in the workflow unless overridden by job-specific permissions. Since the workflow involves checking out code and running a secret scanning tool, it only requires contents: read permissions. This change ensures the workflow operates with the minimum necessary privileges.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[github-actions]

1. Review Summary: This diff adds a secrets scan workflow to the repository. The workflow is triggered on push events to the `main` branch and on pull requests, and it runs on `ubuntu-latest`. The workflow includes `permissions: contents: read`.

2. Critical issues: None

3. Suggestions:
    *   While the addition of a secret scan workflow is generally good, consider adding specific secret scanning tools and configurations within the workflow to define what and how to scan, making it more effective. Tools like `trufflehog` or `gitleaks` are popular choices.
    *   Add a step to report the secrets scan results. It might be beneficial to send notifications or create issues automatically when secrets are found.
    *   Evaluate if the `contents: read` permission is sufficient or if additional permissions are needed based on the chosen scanning tool.
    *   Consider adding a step to fail the workflow if secrets are found to prevent accidental merging of code containing secrets.
    *   Add a step to install any necessary dependencies or tools required for secret scanning before running the scan itself.

4. Quick wins or positive aspects: Adding a secrets scan workflow is a proactive step towards improving the security of the repository. The workflow's trigger configuration is appropriate for catching secrets before they are merged into the main branch.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

see 7 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.