chore: update top level workflow permissions (#1848)

2024-01-13 00:31:45 -07:00
parent 9c39b0b6e9
commit a57f4dcc81
10 changed files with 40 additions and 4 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,6 +20,11 @@ on:
  schedule:
    - cron: '44 20 * * 0'

+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
 jobs:
  analyze:
    name: Analyze