Merge pull request #287 from chef/alert-autofix-30

ashiqueps · web-flow · commit 3964d20cf5da · 2025-05-07T17:06:42.000Z
Potential fix for code scanning alert no. 30: Workflow does not contain permissions
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
@@ -1,4 +1,6 @@
 name: SonarQube scan
+permissions:
+  contents: read
 on:
   # Trigger analysis when pushing to your main branches, and when creating a pull request.
   push:
