Skip to content

Potential fix for code scanning alert no. 2: Workflow does not contain permissions #313

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cinderellasecure wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Potential fix for code scanning alert no. 2: Workflow does not contain permissions #313

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Potential fix for code scanning alert no. 2: Workflow does not contai… 
…n permissions

As part of the organization's transition to default read-only permissions for the GITHUB_TOKEN, this pull request addresses a missing permission in the workflow that triggered a code scanning alert.

This PR explicitly adds the required read permissions to align with the default read only permission and is part of a larger effort for this OKR github/security-services#455

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
  • Loading branch information
@cinderellasecure @github-advanced-security
cinderellasecure and github-advanced-security[bot] authored Nov 3, 2025
commit 4f2b4412b956f8e18a294eb41a7bd957dc6e393d
2 changes: 2 additions & 0 deletions .github/workflows/test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
name: Test
permissions:
contents: read

on: [push, pull_request]

Expand Down