Bump the npm_and_yarn group across 1 directory with 2 updates #2
dependabot[bot]codeql-analysis.yml
on: pull_request
Matrix: CodeQL analysis / Analyze
Waiting for pending jobs
Annotations
1 error
|
Invalid workflow file:
.github/workflows/codeql-analysis.yml#L12
The workflow is not valid. .github/workflows/codeql-analysis.yml (Line: 12, Col: 3): Error calling workflow 'actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main'. The nested job 'analyze' is requesting 'actions: read, security-events: write', but is only allowed 'actions: none, security-events: none'.
|