From d7647274c35fda9236ff0105150b0ea57690b0f2 Mon Sep 17 00:00:00 2001 From: Brett Cannon Date: Wed, 28 Apr 2021 10:46:07 -0700 Subject: [PATCH 1/2] Add the 'statuses' permission to the CodeQL workflow --- .github/workflows/codeql-analysis.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 822f9deb1d25..bdd21fa755ed 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -17,6 +17,9 @@ on: schedule: - cron: '0 3 * * 0' +permissions: + statuses: write + jobs: analyze: name: Analyze From 72ae545ed48797131be95925931764e8a5acc0e1 Mon Sep 17 00:00:00 2001 From: Brett Cannon Date: Wed, 28 Apr 2021 15:08:35 -0700 Subject: [PATCH 2/2] Use security-events as the permission for CodeQL See https://github.com/github/codeql-action/issues/464 for details --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index bdd21fa755ed..d34222e16376 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -18,7 +18,7 @@ on: - cron: '0 3 * * 0' permissions: - statuses: write + security-events: write jobs: analyze: