feat: Update permissions + add upload step

advanced-security · Nov 18, 2024 · 3dc8ff4 · 3dc8ff4
1 parent ee717ff
commit 3dc8ff4
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/container-security.yml b/.github/workflows/container-security.yml
@@ -31,6 +31,7 @@ jobs:
 
     permissions:
       contents: read
+      security-events: write
 
     steps:
       - name: Checkout repository
@@ -62,6 +63,12 @@ jobs:
           only-fixed: true
           fail-build: ${{ inputs.scanning-block }}
 
+      - name: Upload SARIF artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: sarif
+          path: ${{ steps.scan.outputs.sarif }}
+
       - name: Upload vulnerability report
         uses: github/codeql-action/upload-sarif@v3
         with: