Overwriting permissions on security related jobs (#5762)

Signed-off-by: Ryan West <[email protected]>
cortexproject · Feb 3, 2024 · deb91a2 · deb91a2
1 parent d425069
commit deb91a2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/test-build-deploy.yml b/.github/workflows/test-build-deploy.yml
@@ -59,6 +59,10 @@ jobs:
   security:
     name: CodeQL
     runs-on: ubuntu-20.04
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4