From d8a2673986720cf4f579448519c77a37d861d53e Mon Sep 17 00:00:00 2001
From: arjundashrath <54043589+arjundashrath@users.noreply.github.com>
Date: Mon, 14 Feb 2022 12:59:51 +0530
Subject: [PATCH 1/4] Update prisma.yml

---
 code-scanning/prisma.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/code-scanning/prisma.yml b/code-scanning/prisma.yml
index 5323d1b..5b11482 100644
--- a/code-scanning/prisma.yml
+++ b/code-scanning/prisma.yml
@@ -21,8 +21,14 @@ on:
   schedule:
     - cron: $cron-weekly
 
+permissions:
+  contents: read
+
 jobs:
   prisma_cloud_iac_scan:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     runs-on: ubuntu-latest
     name: Run Prisma Cloud IaC Scan to check
     steps:

From 3394a8e62f54f84b23c843b970d4ca143013db12 Mon Sep 17 00:00:00 2001
From: Shubham malik <shubhammalik24619@gmail.com>
Date: Tue, 15 Feb 2022 16:38:05 +0530
Subject: [PATCH 2/4] Update mobsf.yml

---
 code-scanning/mobsf.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/code-scanning/mobsf.yml b/code-scanning/mobsf.yml
index 689a1a0..d8eaa92 100644
--- a/code-scanning/mobsf.yml
+++ b/code-scanning/mobsf.yml
@@ -13,8 +13,14 @@ on:
   schedule:
     - cron: $cron-weekly
 
+permissions:
+  contents: read
+
 jobs:
   mobile-security:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     runs-on: ubuntu-latest
 
     steps:
@@ -33,4 +39,4 @@ jobs:
       - name: Upload mobsfscan report
         uses: github/codeql-action/upload-sarif@v1
         with:
-          sarif_file: results.sarif
\ No newline at end of file
+          sarif_file: results.sarif

From ed9202263d2954cd84dc11e0068ea5744268e8ab Mon Sep 17 00:00:00 2001
From: laurentsimon <laurentsimon@google.com>
Date: Fri, 18 Feb 2022 01:00:27 +0000
Subject: [PATCH 3/4] Update hash for scorecard's v1.0.4 release

---
 code-scanning/scorecards.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/code-scanning/scorecards.yml b/code-scanning/scorecards.yml
index 618ce28..d63b462 100644
--- a/code-scanning/scorecards.yml
+++ b/code-scanning/scorecards.yml
@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@c8416b0b2bf627c349ca92fc8e3de51a64b005cf # v1.0.2
+        uses: ossf/scorecard-action@c1aec4ac820532bab364f02a81873c555a0ba3a1 # v1.0.4
         with:
           results_file: results.sarif
           results_format: sarif

From 300f303442f956de563b7f301f652d94acb60cde Mon Sep 17 00:00:00 2001
From: Atul Malaviya <azooinmyluggage@users.noreply.github.com>
Date: Sun, 20 Feb 2022 02:18:18 -0600
Subject: [PATCH 4/4] Added PR trigger (#1448)

---
 ci/msbuild.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ci/msbuild.yml b/ci/msbuild.yml
index 29b6ace..e650e2a 100644
--- a/ci/msbuild.yml
+++ b/ci/msbuild.yml
@@ -1,6 +1,10 @@
 name: MSBuild
 
-on: [push]
+on:
+  push:
+    branches: [ $default-branch ]
+  pull_request:
+    branches: [ $default-branch ]
 
 env:
   # Path to the solution file relative to the root of the project.