Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

.github/workflows/testing.yml

@@ -2,6 +2,9 @@ name: Test against pacman
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Lint and test yay