From cdbffa4ae9aeb1a52f774816931aed2bead1387d Mon Sep 17 00:00:00 2001 From: shivam-sood89 <91078650+shivam-sood89@users.noreply.github.com> Date: Mon, 23 Jun 2025 11:25:49 -0400 Subject: [PATCH] Potential fix for code scanning alert no. 4: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/main.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index c6bd86c8..de19d3cd 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -1,5 +1,8 @@ name: "Trivy Scan" +permissions: + contents: read + on: pull_request: branches: