ci: Added githbu codeql sarif upload permissions

tattle-made · Mar 11, 2024 · 1bcd94b · 1bcd94b
1 parent e9afff0
commit 1bcd94b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/pr-security.yml b/.github/workflows/pr-security.yml
@@ -14,6 +14,9 @@ on:
 jobs:
   checks:
     if: github.event.pull_request.draft == false
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     name: Run security checks
     runs-on: ubuntu-latest
     steps: