From 471d74ac298ea3dc5f271fa1ffe1b7d1aab4ae41 Mon Sep 17 00:00:00 2001 From: Hassan Sufi Date: Thu, 1 Feb 2024 15:36:55 -0800 Subject: [PATCH] Add neccessary permission for code QL workflow --- .github/workflows/codeql.yml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index a9277f11b9b..a7257561d43 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -6,6 +6,9 @@ on: schedule: - cron: '0 19 * * 0' +permissions: + security-events: write + jobs: CodeQL-Build: @@ -14,7 +17,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v2 + uses: actions/checkout@main with: # We must fetch at least the immediate parents so that if this is # a pull request then we can checkout the head. @@ -27,14 +30,14 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: javascript # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -48,4 +51,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3