From a975ececbb50a56506c9b65ca504d0dbbfd46167 Mon Sep 17 00:00:00 2001 From: Ashutosh Narkar Date: Fri, 23 Aug 2024 13:41:34 -0700 Subject: [PATCH] .github/workflows: Update GHA token perms for CodeQL workflow Ref: https://github.com/github/codeql-action?tab=readme-ov-file#permissions Signed-off-by: Ashutosh Narkar --- .github/workflows/codeql-analysis.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 44d4c42ff7..bba9ed0e2d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -15,8 +15,10 @@ on: push: branches: [ main, release-* ] -permissions: - contents: write +permissions: + actions: read + contents: read + security-events: write jobs: analyze: