Fix permissions for Trivy GitHub workflow

This commit is contained in:
Sebastian Serth
2023-03-13 16:19:08 +01:00
parent a4599f2cf9
commit f35493d14e

View File

@ -100,6 +100,10 @@ jobs:
dep-scan: dep-scan:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
needs: [ compile ] needs: [ compile ]
if: github.event_name != 'push' || github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' && github.actor != 'dependabot' if: github.event_name != 'push' || github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' && github.actor != 'dependabot'
steps: steps: