From b9fbda1e7dcc2e8bc9899b02573484620eea0325 Mon Sep 17 00:00:00 2001
From: Remco Vermeulen <rvermeulen@users.noreply.github.com>
Date: Mon, 30 May 2022 14:11:28 +0200
Subject: [PATCH] Add actions read permission

The CodeQL Action requires this permission to collect information of the workflow run.
---
 code-scanning/anchore.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/code-scanning/anchore.yml b/code-scanning/anchore.yml
index 6f52d5d..5c19cc3 100644
--- a/code-scanning/anchore.yml
+++ b/code-scanning/anchore.yml
@@ -28,6 +28,7 @@ jobs:
     permissions:
       contents: read # for actions/checkout to fetch code
       security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # for github/codeql-action/upload-sarif to get Action run status
     runs-on: ubuntu-latest
     steps:
     - name: Checkout the code