Merge pull request #2275 from aeisenberg/patch-1

Clarify permisions on codeql-action starter
actions · Jan 10, 2024 · 4d89c34 · 4d89c34
2 parents c31fe3d + 42326d0
commit 4d89c34
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/code-scanning/codeql.yml b/code-scanning/codeql.yml
@@ -30,9 +30,12 @@ jobs:
  runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
  timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
  permissions:
+ # required for all workflows
+ security-events: write
+
+ # only required for workflows in private repositories
  actions: read
  contents: read
- security-events: write
 
  strategy:
  fail-fast: false