Clarify permisions on codeql-action starter

2024-01-09 12:22:16 -08:00
parent c31fe3d5d4
commit 42326d0804
1 changed files with 4 additions and 1 deletions
@@ -30,9 +30,12 @@ jobs:
    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
    timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
    permissions:
+      # required for all workflows
+      security-events: write
+
+      # only required for workflows in private repositories
      actions: read
      contents: read
-      security-events: write

    strategy:
      fail-fast: false