[Update] trivy.yml

STARIONGROUP · Dec 8, 2023 · 3f2dbae · 3f2dbae
1 parent 8395b0d
commit 3f2dbae
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -6,6 +6,11 @@ on:
 
 jobs:
   docker:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout