Fix permissions for check-run action (#5316)

.github/workflows/scan.yml

@@ -11,11 +11,14 @@ on:
     branches:
       - main
 
+permissions: {}
+
 jobs:
   check-run:
     name: Check PR run
     uses: bitwarden/gh-actions/.github/workflows/check-run.yml@main
-    permissions: read-all
+    permissions:
+      contents: read
 
   sast:
     name: SAST scan