ci: scope GitHub Actions permissions to least privilege (#6028)

Co-authored-by: Ankur Jangid <ankurjangid@Ankurs-MacBook-Air.local> Co-authored-by: Daniel Imms <2193314+Tyriar@users.noreply.github.com>
2026-08-10 11:39:43 +00:00
parent d6cfe3db5d
commit 29a7384233
3 changed files with 11 additions and 0 deletions
@@ -8,6 +8,11 @@ on:
  schedule:
    - cron: '41 17 * * 0'

+permissions:
+  actions: read          
+  contents: read          
+  security-events: write 
+
 jobs:
  analyze:
    name: Analyze