Fix osv-scanner workflow

zentralopensource · Aug 28, 2024 · 288a37f · 288a37f
1 parent fb18558
commit 288a37f
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
@@ -17,10 +17,9 @@ on:
     branches: [ "main" ]
 
 permissions:
-  # Require writing security events to upload SARIF file to security tab
-  security-events: write
-  # Read commit contents
-  contents: read
+  actions: read
+  contents: read # to fetch code (actions/checkout)
+  security-events: write # for uploading SARIF files
 
 jobs:
   scan-scheduled: