Merge pull request #786 from Azure/jeetgarg-patch-2

Update dependency-review.yml with job level permission as Read

Author: danycontre

.github/workflows/dependency-review.yml

@@ -5,6 +5,7 @@
 # Source repository: https://github.com/actions/dependency-review-action
 # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
 name: 'Dependency Review'
+
 on: [pull_request]
 
 permissions:
@@ -13,6 +14,10 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
     steps:
       - name: 'Checkout Repository'
         uses: actions/checkout@v4