Merge pull request #2275 from aeisenberg/patch-1

Clarify permisions on codeql-action starter
2024-01-10 23:12:29 +01:00
parent c31fe3d5d4 42326d0804
commit 4d89c3455a
1 changed files with 4 additions and 1 deletions
@@ -30,9 +30,12 @@ jobs:
    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
    timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
    permissions:
+      # required for all workflows
+      security-events: write
+
+      # only required for workflows in private repositories
      actions: read
      contents: read
-      security-events: write

    strategy:
      fail-fast: false