Potential fix for code scanning alert no. 2: Workflow does not contain permissions

[codecentaur]

Potential fix for https://github.com/codecentaur/blog/security/code-scanning/2

To resolve the issue, you need to add an explicit permissions block to the workflow. Because the workflow uses peaceiris/actions-gh-pages@v4 with GITHUB_TOKEN to push compiled files to the gh-pages branch, it requires contents: write for pushing commits, and generally no additional scopes. You should place this block at the workflow or job level for clarity and maintainability.

The best fix:

• Insert a permissions: section before the jobs key (jobs:).
• Set contents: write, which is the minimum required for GitHub Pages deployment.
• You may opt to add pages: write or other scopes if deployment requires (very rarely, so not for this fix).
• Only edit .github/workflows/deploy-to-pages.yml as shown.

No new methods or imports are needed—just add the relevant YAML block.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.