actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #1373 from h0x0er/main

Browse Source 
Added GITHUB_TOKEN permission for code-scanning/anchore.yml
This commit is contained in:
Nick Fyson
2022-02-04 10:45:44 +00:00
committed by GitHub
parent 8ec9e75aba c84eced9e9
commit 64ccdd2a47
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code-scanning/anchore.yml
+7 -1
View File
@@ -20,8 +20,14 @@ on:
schedule: schedule:
- cron: $cron-weekly - cron: $cron-weekly
permissions:
contents: read
jobs: jobs:
Anchore-Build-Scan: Anchore-Build-Scan:
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout the code - name: Checkout the code
@@ -36,4 +42,4 @@ jobs:
- name: Upload Anchore Scan Report - name: Upload Anchore Scan Report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v1
with: with:
sarif_file: results.sarif sarif_file: results.sarif