From 9446706f957ba6c5916237b1e77eff2df59212be Mon Sep 17 00:00:00 2001
From: Jarek Potiuk <jarek@potiuk.com>
Date: Fri, 25 Jun 2021 19:35:37 +0200
Subject: [PATCH] Fix permissions for CodeQL workflows (#16660)

After limiting permissions, our CodeQL workflow started failing.

This is because it needs some extra permissions as explained in
the https://github.com/github/codeql-action/issues/464

This PR adds the required permissions.

GitOrigin-RevId: b8a9e9fba6737500bdcce920028ece87a31ab129
---
 .github/workflows/codeql-analysis.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 096177a81f7..6d6f4d02562 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -67,7 +67,11 @@ jobs:
         # Override automatic language detection by changing the below list
         # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
         language: ['python', 'javascript']
-
+    permissions:
+      actions: read
+      contents: read
+      pull-requests: read
+      security-events: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v2