ci: add actions read permission to OSV-Scanner workflow
Grant necessary read access to actions to ensure the vulnerability scanner can evaluate the execution environment.
This commit is contained in:
1 file changed
+5
-4
@@ -13,19 +13,20 @@ name: OSV-Scanner
|
|||||||
|
|
||||||
on:
|
on:
|
||||||
pull_request:
|
pull_request:
|
||||||
branches: [ "main" ]
|
branches: ["main"]
|
||||||
merge_group:
|
merge_group:
|
||||||
branches: [ "main" ]
|
branches: ["main"]
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '45 8 * * 1'
|
- cron: "45 8 * * 1"
|
||||||
push:
|
push:
|
||||||
branches: [ "main" ]
|
branches: ["main"]
|
||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
# Require writing security events to upload SARIF file to security tab
|
# Require writing security events to upload SARIF file to security tab
|
||||||
security-events: write
|
security-events: write
|
||||||
# Read commit contents
|
# Read commit contents
|
||||||
contents: read
|
contents: read
|
||||||
|
actions: read
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
scan-scheduled:
|
scan-scheduled:
|
||||||
|
|||||||
Reference in new issue
Block a user