fix: grant trivy write access to security-events (#584)

.github/workflows/trivy.yml

@@ -12,6 +12,8 @@ jobs:
   build:
     name: Trivy
     runs-on: ubuntu-latest
+    permissions:
+      security-events: write
     steps:
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2