Merge pull request #1477 from Devils-Knight/permks-2
Add token permissions for code-scanning/codescan.yml
This commit is contained in:
@@ -17,8 +17,14 @@ on:
|
|||||||
schedule:
|
schedule:
|
||||||
- cron: $cron-weekly
|
- cron: $cron-weekly
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
CodeScan:
|
CodeScan:
|
||||||
|
permissions:
|
||||||
|
contents: read # for actions/checkout to fetch code
|
||||||
|
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
|
|||||||
Reference in New Issue
Block a user