[StefH]

Potential fix for https://github.com/wiremock/WireMock.Net/security/code-scanning/8

Add an explicit permissions block at the workflow root in .github/workflows/ci.yml, immediately after the on trigger section and before jobs.
For this workflow, the minimal required permission is:

• contents: read

This supports actions/checkout and test execution without granting write scopes.
Root-level placement is the best single fix here because it applies consistently to both existing jobs (windows-build-and-run and linux-build-and-run) without changing functionality or duplicating configuration.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 30.60%. Comparing base (7d0de75) to head (08d182a).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1523      +/-   ##
==========================================
- Coverage   31.51%   30.60%   -0.91%     
==========================================
  Files         179      168      -11     
  Lines       44395    44322      -73     
==========================================
- Hits        13989    13563     -426     
- Misses      30028    30392     +364     
+ Partials      378      367      -11     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.