Fix permissions 0- Update snyk-security.yml

discordextremelist · Feb 29, 2024 · 9ad5399 · 9ad5399
1 parent fa93d7d
commit 9ad5399
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/snyk-security.yml b/.github/workflows/snyk-security.yml
@@ -25,7 +25,9 @@ on:
     branches: ["main"]
 
 permissions:
-  contents: read
+  contents: read # for actions/checkout to fetch code
+  security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+  actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
 
 jobs:
   security: