add permission #3020

yurake · Feb 8, 2023 · c82283b · c82283b
1 parent 5214c9a
commit c82283b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/snyk-infrastructure.yml b/.github/workflows/snyk-infrastructure.yml
@@ -43,6 +43,10 @@ jobs:
         with:
           sarif_file: snyk.sarif
   snyk-maven:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master