Skip to content

Commit e10beb2

Browse files
committed
Another permission attempt
This removes the `read-all` and just includes a checkov skip.
1 parent 22737eb commit e10beb2

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

.github/workflows/dev-build.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,11 +12,10 @@ on:
1212
paths-ignore:
1313
- '.github/**'
1414

15-
permissions: read-all
16-
1715
jobs:
1816
deploy:
1917
# These permissions are needed to interact with GitHub's OIDC Token endpoint.
18+
# checkov:skip=CKV2_GHA_1:This ONLY uses a shared workflow and that shared workflow has restricted permissions
2019
permissions:
2120
id-token: write
2221
contents: read

0 commit comments

Comments
 (0)