Update codeql.yml

Signed-off-by: Hilmar Falkenberg <hilmar.falkenberg@sap.com>
open-component-model · Jan 30, 2025 · 54a9246 · 54a9246
1 parent d07a6ea
commit 54a9246
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -120,6 +120,8 @@ jobs:
     permissions:
       # Required to upload SARIF files
       security-events: write
+      # for actions/checkout to fetch code
+      contents: read
     # call reusable workflow from central '.github' repo
     uses: open-component-model/.github/.github/workflows/code-scan.yml@main
     secrets: inherit