Merge pull request moby#5326 from silvin-lubecki/fix-ci-govulncheck-permissions

crazy-max · web-flow · commit 2a7accc029ec · 2024-09-12T14:34:01.000+02:00
ci: Fix govulncheck permissions
diff --git a/.github/workflows/buildkit.yml b/.github/workflows/buildkit.yml
@@ -149,6 +149,8 @@ jobs:
     permissions:
       # required to write sarif report
       security-events: write
+      # required to check out the repository
+      contents: read
     steps:
       -
         name: Checkout

Original file line number	Diff line number	Diff line change
`@@ -149,6 +149,8 @@ jobs:`
`149`	`149`	`permissions:`
`150`	`150`	`# required to write sarif report`
`151`	`151`	`security-events: write`
	`152`	`+ # required to check out the repository`
	`153`	`+ contents: read`
`152`	`154`	`steps:`
`153`	`155`	`-`
`154`	`156`	`name: Checkout`