Fix/security workflow permissions#24
Conversation
The Trivy and Gosec jobs need security-events:write permission to upload SARIF results to GitHub Security. Without this, the upload-sarif step fails with 'Resource not accessible by integration' error.
…ssions - Upgrade github/codeql-action from v3 (deprecated Dec 2026) to v4 - Ensure security-events:write and contents:read permissions are set - Fixes 'Resource not accessible by integration' error on SARIF uploads
⚡ Benchmark ResultsBenchmark Resultsgoos: linux WorkloadClassification/Spark-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ² WorkloadClassification/Spark-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ² |
Description
Fix/security workflow permissions
Related Issue
Fixes #(issue)
Type of change
How Has This Been Tested?
Test Configuration:
Checklist
Additional Notes