Tighten permissions for analysis

bcgov · Jan 6, 2025 · c4b3af8 · c4b3af8
1 parent 39a316a
commit c4b3af8
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml
@@ -13,6 +13,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   tests:
     name: Unit Tests
@@ -38,6 +40,8 @@ jobs:
     name: Trivy Security Scan
     if: ${{ ! github.event.pull_request.draft }}
     needs: [tests]
+    permissions:
+      security-events: write
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4