Updated scan & update permissions

Signed-off-by: Eddie Knight <knight@linux.com>

.github/workflows/scan.yaml

@@ -27,6 +27,8 @@ jobs:
 
   snyk:
     name: Snyk
+    permisions:
+      security-events: write
     runs-on: ubuntu-latest
     if: (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
     steps:

.github/workflows/update.yaml

@@ -12,6 +12,9 @@ permissions:
 
 jobs:
   update-components:
+    permissions:
+      contents: write
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: Check out code