allow scan upload

Author: tylertitsworth

.github/workflows/container-ci.yaml

@@ -141,6 +141,8 @@ jobs:
     needs: [setup-scan]
     if: ${{ !inputs.no_build }}
     runs-on: k8-runners
+    permissions:
+      security-events: write
     strategy:
       matrix:
         container: ${{ fromJSON(needs.setup-scan.outputs.matrix) }}