Use new CLA permission configs

Set the permissions we need from their site

Signed-off-by: Tim Smith <tsmith84@gmail.com>

.github/workflows/cla.yaml

@@ -5,13 +5,19 @@ on:
  pull_request_target:
  types: [opened,closed,synchronize]
 
+permissions:
+ actions: write
+ contents: write
+ pull-requests: write
+ statuses: write
+
 jobs:
  CLAssistant:
  runs-on: ubuntu-latest
  steps:
  - name: "CLA Assistant"
  if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the Mondoo CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
- uses: contributor-assistant/github-action@v2.3.0
+ uses: contributor-assistant/github-action@v2.3.1
  env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_ACCESS_TOKEN }}