From cdc592d6034f2f17c52a825dd1b456e6e9e6f576 Mon Sep 17 00:00:00 2001
From: Eli Reisman <elireisman@github.com>
Date: Tue, 29 Mar 2022 08:52:08 -0700
Subject: [PATCH] update action version used in template to "v1" branch; set
 perms to "contents: read"

---
 code-scanning/dependency-review.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/code-scanning/dependency-review.yml b/code-scanning/dependency-review.yml
index eb3a90b..0e72a00 100644
--- a/code-scanning/dependency-review.yml
+++ b/code-scanning/dependency-review.yml
@@ -8,7 +8,7 @@ name: 'Dependency Review'
 on: [pull_request]
 
 permissions:
-  repo: read
+  contents: read
 
 jobs:
   dependency-review:
@@ -17,4 +17,4 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@v3
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@main
+        uses: actions/dependency-review-action@v1