Merge pull request #166 from nolte/fix/trivy

nolte · May 17, 2023 · a43d4c5 · a43d4c5
2 parents 70d12ca + 43d2b2f
commit a43d4c5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/reuseable-trivy.yaml b/.github/workflows/reuseable-trivy.yaml
@@ -6,6 +6,11 @@ on:
 jobs:
   build:
     name: Build
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code