ci: add actions read permission to OSV-Scanner workflow

Grant necessary read access to actions to ensure the vulnerability scanner can evaluate the execution environment.
This commit is contained in:
Nils Andreas Svee committed 2026-05-11 15:01:05 +07:00
1 parent c04e8f7084
commit e2a9d68843
1 file changed
+5 -4
+5 -4
View File
@@ -13,19 +13,20 @@ name: OSV-Scanner
on: on:
pull_request: pull_request:
branches: [ "main" ] branches: ["main"]
merge_group: merge_group:
branches: [ "main" ] branches: ["main"]
schedule: schedule:
- cron: '45 8 * * 1' - cron: "45 8 * * 1"
push: push:
branches: [ "main" ] branches: ["main"]
permissions: permissions:
# Require writing security events to upload SARIF file to security tab # Require writing security events to upload SARIF file to security tab
security-events: write security-events: write
# Read commit contents # Read commit contents
contents: read contents: read
actions: read
jobs: jobs:
scan-scheduled: scan-scheduled: