Add a permissions block for generated workflows

Ensure that all workflows are able to write security events.

Author: aeisenberg

.github/workflows/__debug-artifacts.yml

@@ -23,7 +23,6 @@
 
 """
 
-
 class NonAliasingRTRepresenter(ruamel.yaml.representer.RoundTripRepresenter):
     def ignore_aliases(self, data):
         return True
@@ -71,6 +70,9 @@ def writeHeader(checkStream):
             }
         },
         'name': checkSpecification['name'],
+        'permissions': {
+            'security-events': 'write'
+        },
         'runs-on': '${{ matrix.os }}',
         'steps': steps
     }