add checks write permissions

.github/workflows/android.yml

@@ -24,14 +24,30 @@ jobs:
           name: maven-repo
           path: ~/.m2/repository/com/yubico/yubikit/
 
-      - name: Publish SpotBugs reports
-        uses: lcollins/[email protected]
-        with:
-          path: ./**/build/reports/spotbugs/*.xml
-
       - name: Upload build reports
         uses: actions/upload-artifact@v3
         if: always()
         with:
           name: build-reports
           path: ./*/build/reports/*
+
+  spotbugs-report:
+    runs-on: ubuntu-latest
+    permissions:
+      checks: write
+    steps:
+      - uses: actions/checkout@v3
+      - name: set up JDK
+        uses: actions/setup-java@v3
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Build with Gradle
+        run: NO_GPG_SIGN=true ./gradlew --stacktrace check
+
+
+      - name: Publish SpotBugs reports
+        uses: lcollins/[email protected]
+        with:
+          path: ./**/build/reports/spotbugs/*.xml