From a3194f5b4757a7bfb2324b17ccf11e28df2bc4f9 Mon Sep 17 00:00:00 2001
From: Marco Gario <marcogario@github.com>
Date: Thu, 11 Apr 2024 09:39:30 +0200
Subject: [PATCH] Update CodeQL workflow to use packages:read permission.

Co-authored-by: Anders Starcke Henriksen <starcke@github.com>
---
 code-scanning/codeql.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/code-scanning/codeql.yml b/code-scanning/codeql.yml
index d24240d..6fdadb1 100644
--- a/code-scanning/codeql.yml
+++ b/code-scanning/codeql.yml
@@ -33,6 +33,9 @@ jobs:
       # required for all workflows
       security-events: write
 
+      # required to fetch internal or private CodeQL packs
+      packages: read
+
       # only required for workflows in private repositories
       actions: read
       contents: read