ci: Fix govulncheck permissions, it needs at least content read to be able to checkout the repository.

silvin-lubecki · silvin-lubecki · commit 4ced74887130 · 2024-09-12T12:26:32.000+02:00
Signed-off-by: Silvin Lubecki &lt;silvin.lubecki@docker.com&gt;
diff --git a/.github/workflows/buildkit.yml b/.github/workflows/buildkit.yml
@@ -149,6 +149,8 @@ jobs:
     permissions:
       # required to write sarif report
       security-events: write
+      # required to check out the repository
+      contents: read
     steps:
       -
         name: Checkout

Original file line number	Diff line number	Diff line change
`@@ -149,6 +149,8 @@ jobs:`
`149`	`149`	`permissions:`
`150`	`150`	`# required to write sarif report`
`151`	`151`	`security-events: write`
	`152`	`+ # required to check out the repository`
	`153`	`+ contents: read`
`152`	`154`	`steps:`
`153`	`155`	`-`
`154`	`156`	`name: Checkout`