From 36afd6ce53b0468dc27f5a41536bd6b0adc813de Mon Sep 17 00:00:00 2001 From: TwistedUmbrellaX Date: Wed, 10 Apr 2024 23:13:45 -0400 Subject: [PATCH] Grant GitHub access to ...GitHub Why shouldn't the least secure process be the one to verify the security? --- .github/workflows/codeql.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e760519..733870f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -6,9 +6,7 @@ on: pull_request: branches: [ master ] -permissions: - contents: write - packages: read +permissions: write-all jobs: analyze: