Updated scan & update permissions
Signed-off-by: Eddie Knight <knight@linux.com>
This commit is contained in:
2
.github/workflows/scan.yaml
vendored
2
.github/workflows/scan.yaml
vendored
@@ -27,6 +27,8 @@ jobs:
|
|||||||
|
|
||||||
snyk:
|
snyk:
|
||||||
name: Snyk
|
name: Snyk
|
||||||
|
permisions:
|
||||||
|
security-events: write
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
if: (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
|
if: (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
|
||||||
steps:
|
steps:
|
||||||
|
|||||||
3
.github/workflows/update.yaml
vendored
3
.github/workflows/update.yaml
vendored
@@ -12,6 +12,9 @@ permissions:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
update-components:
|
update-components:
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
pull-requests: write
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Check out code
|
- name: Check out code
|
||||||
|
|||||||
Reference in New Issue
Block a user