Merge pull request #905 from krakend/fix_security_permissions

Add permissions to upload the security reports
krakend · Jul 16, 2024 · c6a9789 · c6a9789
2 parents 4372c13 + 8d443ba
commit c6a9789
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -42,11 +42,13 @@ jobs:
           sarif_file: 'trivy-results.sarif'
 
   image-scan:
+    permissions:
+      security-events: write
+      actions: read
+      contents: read
     strategy:
       matrix:
         config:
-          - image: krakend/builder
-            dockerfile: Dockerfile-builder
           - image: krakend/krakend-ce
             dockerfile: Dockerfile
     runs-on: ubuntu-latest