rbxii3/firmware
1
0
Fork 0
mirror of https://github.com/meshtastic/firmware.git synced 2025-12-24 03:31:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Give Semgrep permission to write its report (#6253)

Browse Source 
Previously semgrep had read-all permission. This patch limits read
slightly and adds write permissions to security-events.
This commit is contained in:
Tom Fifield
2025-03-07 08:52:54 +08:00
committed by GitHub
parent f7afa9a81e
commit f0a2ae9ff3
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.github/workflows/sec_sast_semgrep_cron.yml vendored
View File

@@ -6,7 +6,10 @@ on:
schedule:
- cron: 0 1 * * 6
permissions: read-all
permissions:
actions: read
contents: read
security-events: write
jobs:
semgrep-full: