robojerk/codeql-action

Updates the permissions block to be minimal

Browse source 
And adds a permissions block to the README.
This commit is contained in:
Andrew Eisenberg 2021-08-09 11:40:19 -07:00
parent 9e304b92ff
commit 21753283b1
3 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -42,6 +42,14 @@ jobs:
# CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
runs-on: ubuntu-latest
permissions:
# required for all workflows
security-events: write
# only required for workflows in private repositories
actions: read
contents: read
steps:
- name: Checkout repository
uses: actions/checkout@v2