add actions: read to any job using upload-sarif

2022-09-14 18:17:28 -04:00
parent f6c8c7e589
commit 568b096f39
29 changed files with 29 additions and 1 deletions
@@ -25,6 +25,7 @@ jobs:
    permissions:
      contents: read
      security-events: write
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status 
    steps:
      - name: Checkout code
        uses: actions/checkout@v2