From e2a9d68843db0082a28b04eeb0496dd7159e4cb0 Mon Sep 17 00:00:00 2001 From: Nils Andreas Svee Date: Mon, 11 May 2026 15:01:05 +0700 Subject: [PATCH] ci: add actions read permission to OSV-Scanner workflow Grant necessary read access to actions to ensure the vulnerability scanner can evaluate the execution environment. --- .github/workflows/osv-scanner.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml index 591205e..253c865 100644 --- a/.github/workflows/osv-scanner.yml +++ b/.github/workflows/osv-scanner.yml @@ -13,19 +13,20 @@ name: OSV-Scanner on: pull_request: - branches: [ "main" ] + branches: ["main"] merge_group: - branches: [ "main" ] + branches: ["main"] schedule: - - cron: '45 8 * * 1' + - cron: "45 8 * * 1" push: - branches: [ "main" ] + branches: ["main"] permissions: # Require writing security events to upload SARIF file to security tab security-events: write # Read commit contents contents: read + actions: read jobs: scan-scheduled: