🌱 Updated actions permission for codeql

* Updated the actions permissions for codeql from write to specific settings. #942
ossf · Sep 3, 2021 · baf5ef3 · baf5ef3
1 parent f55b86d
commit baf5ef3
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -26,6 +26,10 @@
 name: "CodeQL"
 
 on:
+  permissions:
+    contents: read
+    statuses: write
+    security-events: write
   push:
     branches: [ main ]
   pull_request: