Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[AstroZer01]

Potential fix for https://github.com/AstroZer01/Astro-Steam-Desktop-Authenticator/security/code-scanning/1

Add an explicit permissions block to the workflow so GITHUB_TOKEN is least-privileged.
Best fix here: define it at the workflow root (applies to all jobs unless overridden), immediately after on: (or before jobs:), with:

• contents: read

This preserves existing functionality (checkout still works, artifact upload does not require repo write) while removing implicit broader token rights.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

Summary by CodeRabbit

• Chores
  • Updated the automated build workflow with explicit read-only repository access permissions.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 200a9e2e-402e-46f1-882b-4e7331542952

📥 Commits

Reviewing files that changed from the base of the PR and between d086043 and 3b4aa49.

📒 Files selected for processing (1)

• .github/workflows/dotnet-desktop.yml

---

📝 Walkthrough

Walkthrough

The desktop .NET GitHub Actions workflow now includes a top-level permissions block granting read access to repository contents.

Changes

Workflow permissions

Layer / File(s)	Summary
Declare workflow permissions .github/workflows/dotnet-desktop.yml	Adds a top-level permissions configuration with contents: read.

Estimated code review effort: 1 (Trivial) | ~2 minutes

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch alert-autofix-1

---

_{Comment @coderabbitai help to get the list of available commands.}