From f4a5eefc61c868cf702d790c2f789e3eadf8fbc4 Mon Sep 17 00:00:00 2001 From: Charmander <~@charmander.me> Date: Mon, 4 Dec 2023 01:21:21 -0800 Subject: [PATCH] Bring CodeQL GitHub Actions workflow more in line with defaults Newer defaults and not permissions I intentionally removed, I think? --- .github/workflows/codeql-analysis.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index da7d25c3c..5c094ac7c 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -12,14 +12,17 @@ jobs: analyze: name: Analyze runs-on: ubuntu-latest + timeout-minutes: 360 permissions: + actions: read + contents: read security-events: write strategy: fail-fast: false matrix: language: - - javascript + - javascript-typescript - python steps: