[ws-wss4j] branch master updated: Applying permissions to codeql workflow

[co...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git


The following commit(s) were added to refs/heads/master by this push:
     new c215cb5ab Applying permissions to codeql workflow
c215cb5ab is described below

commit c215cb5ab7ad834f49b8e60fe7243ecc8caff0c4
Author: Colm O hEigeartaigh <co...@apache.org>
AuthorDate: Fri Jun 17 08:35:08 2022 +0100

    Applying permissions to codeql workflow
---
 .github/workflows/codeql-analysis.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 3d84e3418..35c95c9c1 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -14,8 +14,15 @@ on:
   #schedule:
     #- cron: '0 8 * * 5'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
+    permissions:
+      actions: read  # for github/codeql-action/init to get workflow details
+      contents: read  # for actions/checkout to fetch code
+      security-events: write  # for github/codeql-action/analyze to upload SARIF results
     name: Analyze
     runs-on: ubuntu-latest