mirror of
https://github.com/kevinveenbirkenbach/homepage.veen.world.git
synced 2026-04-07 05:12:19 +00:00
fix(ci): grant security-events and packages permissions to security job
Reusable workflow calls inherit only explicitly granted permissions. The nested security job requires packages: read and security-events: write for CodeQL analysis. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
4
.github/workflows/ci.yml
vendored
4
.github/workflows/ci.yml
vendored
@@ -15,6 +15,10 @@ jobs:
|
|||||||
security:
|
security:
|
||||||
name: Run security workflow
|
name: Run security workflow
|
||||||
uses: ./.github/workflows/security.yml
|
uses: ./.github/workflows/security.yml
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
packages: read
|
||||||
|
security-events: write
|
||||||
|
|
||||||
tests:
|
tests:
|
||||||
name: Run test workflow
|
name: Run test workflow
|
||||||
|
|||||||
Reference in New Issue
Block a user