From 6c250eb62e8a0413a3945cd5ca2f27bec671ecd8 Mon Sep 17 00:00:00 2001
From: GitHub Actions <cschleiden@github.com>
Date: Wed, 10 Jan 2024 22:12:47 +0000
Subject: [PATCH] Updating GHES workflows

---
 code-scanning/codeql.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/code-scanning/codeql.yml b/code-scanning/codeql.yml
index ca605c9..808449d 100644
--- a/code-scanning/codeql.yml
+++ b/code-scanning/codeql.yml
@@ -30,9 +30,12 @@ jobs:
     runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
     timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
     permissions:
+      # required for all workflows
+      security-events: write
+
+      # only required for workflows in private repositories
       actions: read
       contents: read
-      security-events: write
 
     strategy:
       fail-fast: false