Merge pull request #1435 from Devils-Knight/permks-13

Add token permissions for code-scanning/mobsf.yml
2022-02-27 14:20:37 +00:00
parent 59afd3e888 8879d481fb
commit 0c8eb3d2ad
1 changed files with 7 additions and 1 deletions
@@ -13,8 +13,14 @@ on:
  schedule:
    - cron: $cron-weekly

+permissions:
+  contents: read
+
 jobs:
  mobile-security:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
    runs-on: ubuntu-latest

    steps:
@@ -33,4 +39,4 @@ jobs:
      - name: Upload mobsfscan report
        uses: github/codeql-action/upload-sarif@v1
        with:
-          sarif_file: results.sarif
+          sarif_file: results.sarif