Fix the token permissions for private copies of the CodeQL Action, an…

…d for runs that are not from pull requests.
github · Apr 30, 2021 · e305db8 · e305db8
1 parent 643bc6e
commit e305db8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -14,7 +14,9 @@ jobs:
       versions: ${{ steps.compare.outputs.versions }}
 
     permissions:
+      actions: read
       contents: read
+      security-events: write
 
     steps:
     - uses: actions/checkout@v2
@@ -63,6 +65,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     permissions:
+      actions: read
       contents: read
       security-events: write