no write for external forks

.github/workflows/sonar-check.yml

@@ -26,10 +26,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
-permissions:
-  contents: read # to fetch code (actions/checkout)
-  pull-requests: write # for sonar to comment on pull-request
-
 jobs:
   build:
     if: github.repository == 'apache/cloudstack'