fix workflow permissions

microsoft · Jun 17, 2024 · 3962a01 · 3962a01
1 parent e785913
commit 3962a01
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -4,7 +4,6 @@ on: [push]
 
 permissions:
   contents: write          # This is required for actions/checkout@v1
-  security-events: write   # To upload sarif files
 
 jobs:
   build:

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
@@ -6,6 +6,11 @@ on:
   schedule:
     - cron: '20 14 * * 1'
 
+permissions:
+  actions: read
+  contents: read
+  security-events: write   # To upload sarif files
+
 jobs:
   analyze:
     name: Analyze
-Original file line number
+Diff line change
@@ Expand Up / @@ -4,7 +4,6 @@ on: [push] @@
     permissions:
       contents: write          # This is required for actions/checkout@v1
-      security-events: write   # To upload sarif files
     jobs:
       build:
@@ Expand Down @@