Merge pull request #1292 from consideRatio/pr/fix-permissions-for-codeql-github-token

consideRatio · web-flow · commit 497a7a17e118 · 2021-05-01T12:43:19.000+02:00
ci: add github-token permissions for CodeQL workflow
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -9,6 +9,10 @@ jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
 
     strategy:
       fail-fast: false
