ci: add actions read permission to OSV-Scanner workflow

Grant necessary read access to actions to ensure the vulnerability scanner can evaluate the execution environment.
This commit is contained in:
Nils Andreas Svee committed 2026-05-11 15:01:05 +07:00
1 parent c04e8f7084
commit e2a9d68843
1 file changed
+5 -4
+5 -4
View File
@@ -13,19 +13,20 @@ name: OSV-Scanner
on:
pull_request:
branches: [ "main" ]
branches: ["main"]
merge_group:
branches: [ "main" ]
branches: ["main"]
schedule:
- cron: '45 8 * * 1'
- cron: "45 8 * * 1"
push:
branches: [ "main" ]
branches: ["main"]
permissions:
# Require writing security events to upload SARIF file to security tab
security-events: write
# Read commit contents
contents: read
actions: read
jobs:
scan-scheduled: