Skip to content

Commit 3dc8ff4

Browse files
committed
feat: Update permissions + add upload step
1 parent ee717ff commit 3dc8ff4

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

.github/workflows/container-security.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ jobs:
3131

3232
permissions:
3333
contents: read
34+
security-events: write
3435

3536
steps:
3637
- name: Checkout repository
@@ -62,6 +63,12 @@ jobs:
6263
only-fixed: true
6364
fail-build: ${{ inputs.scanning-block }}
6465

66+
- name: Upload SARIF artifact
67+
uses: actions/upload-artifact@v4
68+
with:
69+
name: sarif
70+
path: ${{ steps.scan.outputs.sarif }}
71+
6572
- name: Upload vulnerability report
6673
uses: github/codeql-action/upload-sarif@v3
6774
with:

0 commit comments

Comments
 (0)