From 7855c36b3620206889fb800850258ea630263151 Mon Sep 17 00:00:00 2001 From: Hideki Saito Date: Sun, 24 Aug 2025 23:46:41 -0700 Subject: [PATCH] Potential fix for code scanning alert no. 2: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/codeql-analysis.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 677f99d..3ddb12c 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -1,5 +1,9 @@ name: "Code scanning - action" +permissions: + contents: read + security-events: write + on: push: pull_request: