Actions: Add permissions block to code scanning workflow (#850)

2021-04-26 10:57:13 -07:00
parent b00826d76a
commit 1d49ae5b99
1 changed files with 6 additions and 0 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -11,6 +11,12 @@ on:
 jobs:
  codeql:
    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      security_events: write
+      pull_requests: read
+
    steps:
      - name: Checkout repository
        uses: actions/checkout@v2