robojerk/codeql-action

Give only read-level security-events permission where possible

Browse source
This commit is contained in:
Henry Mercer 2025-01-24 13:24:20 +00:00
parent d39065943f
commit 9cd802ec12
58 changed files with 64 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

5
.github/workflows/codeql.yml vendored
View file

@ -24,7 +24,7 @@ jobs:
versions: ${{ steps.compare.outputs.versions }}
permissions:
security-events: write
contents: read
steps:
- uses: actions/checkout@v4
@ -80,7 +80,8 @@ jobs:
runs-on: ${{ matrix.os }}
permissions:
security-events: write
contents: read
security-events: write # needed to upload results
steps:
- name: Checkout