Update codeql.yml

microsoft · Sep 11, 2024 · 531b9a3 · 531b9a3
1 parent 18d65c9
commit 531b9a3
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -30,7 +30,9 @@ jobs:
     runs-on: windows-latest
     timeout-minutes: 360
     permissions:
-      security-events: write
+      actions: read  # for github/codeql-action/init to get workflow details
+      contents: read  # for actions/checkout to fetch code
+      security-events: write  # for github/codeql-action/autobuild to send a status report
       packages: read
 
     steps: