Potential fix for code scanning alert no. 71: Workflow does not contain permissions

kilemensi · github-advanced-security[bot] · web-flow · commit 5306cbb49cc0 · 2026-03-03T09:46:10.000+03:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/bake-and-push.yml b/.github/workflows/bake-and-push.yml
@@ -1,5 +1,9 @@
 name: Bake and Push
 
+permissions:
+  contents: read
+  actions: read
+
 # Reusable workflow for building and pushing a bake target.
 # Replaces build-docker-image.yml for apps migrated to docker-bake.hcl.
 #

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,9 @@`
`1`	`1`	`name: Bake and Push`
`2`	`2`
	`3`	`+permissions:`
	`4`	`+ contents: read`
	`5`	`+ actions: read`
	`6`	`+`
`3`	`7`	`# Reusable workflow for building and pushing a bake target.`
`4`	`8`	`# Replaces build-docker-image.yml for apps migrated to docker-bake.hcl.`
`5`	`9`	`#`