From e1a54050497a68b1d8c88d055f328083d9cae5ae Mon Sep 17 00:00:00 2001 From: Ashish Kurmi <100655670+boahc077@users.noreply.github.com> Date: Wed, 28 Sep 2022 21:13:07 -0700 Subject: [PATCH] ci: add minimum GitHub token permissions for workflows (#20975) * ci: add minimum GitHub token permissions for workflows Signed-off-by: Ashish Kurmi * removing actions and contents read permissions from codeql actions workflow Signed-off-by: Ashish Kurmi Signed-off-by: Ashish Kurmi Co-authored-by: Mattermod --- .github/workflows/codeql-analysis.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 8011abf521..20c839211d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -7,8 +7,13 @@ on: schedule: - cron: '30 5,17 * * *' +permissions: + contents: read + jobs: analyze: + permissions: + security-events: write # for github/codeql-action/autobuild to send a status report name: Analyze runs-on: ubuntu-latest