updated permissions scope

[AafAnsari]

A reference to the issue / Description of it

(#4998)

How does this PR fix the problem?](#4998)

Fixes code scanning vulnerability - https://github.com/ministryofjustice/modernisation-platform/security/code-scanning/1057

How has this been tested?

Created a TEST issue with "onboarding" label. Once the fix is merge, I'll close the issue which will trigger the workflow.

Deployment Plan / Instructions

Will this deployment impact the platform and / or services on it?

{Please write here}

Checklist (check x in [ ] of list items)

• I have performed a self-review of my own code
• All checks have passed
• I have made corresponding changes to the documentation
• Plan and discussed how it should be deployed to PROD (If needed)

Additional comments (if any)

{Please write here}

[github-actions]

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.5.0)
tflint will check the following folders:

Trivy Scan

Show Output