🌱 Updated actions permission for codeql (#964)

* Updated the actions permissions for codeql from write to specific settings. #942
ossf · Sep 7, 2021 · a3d63bf · a3d63bf
1 parent 942c4cf
commit a3d63bf
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -24,7 +24,6 @@
 # supported CodeQL languages.
 #
 name: "CodeQL"
-
 on:
   push:
     branches: [ main ]
@@ -33,6 +32,11 @@ on:
     branches: [ main ]
   schedule:
     - cron: '36 19 * * 3'
+
+permissions:
+  contents: read
+  statuses: write
+  security-events: write
 
 jobs:
   analyze: