Move permissions to jobs

Author: vnaskos-sonar

.github/workflows/shadow-scans.yml

@@ -6,6 +6,10 @@ on:
     - cron: '0 4 * * *'
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: write
+
 jobs:
   scan:
     runs-on: warp-custom-pr-190-windows-2022-base-warpbuild-v20251015115121
@@ -23,9 +27,6 @@ jobs:
           - platform: SonarQubeServerNext
             vault_path: development/kv/data/next
             project_key: SonarSource_sonarlint-visualstudio_b822e41c-dcc7-40ab-a423-2d1dfbb1e248
-    permissions:
-      id-token: write
-      contents: write
     steps:
       - uses: actions/checkout@v5
         with:
@@ -71,9 +72,6 @@ jobs:
     runs-on: github-ubuntu-latest-s
     name: Run IRIS Analysis
     needs: scan
-    permissions:
-      id-token: write
-      contents: write
     if: !cancelled()
     steps:
       - name: Run IRIS Analysis