Fix permissions for CodeQL

microsoft · Dec 27, 2024 · 979c8df · 979c8df
1 parent 6c5c1f2
commit 979c8df
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -33,6 +33,12 @@ jobs:
         - os: ubuntu
           arch: x86
     permissions:
+      # required for all workflows
+      security-events: write
+      # required to fetch internal or private CodeQL packs
+      packages: read
+      # only required for workflows in private repositories
+      actions: read
       contents: read
     name: Build
     runs-on: ${{ matrix.os }}-latest