misc-dailies: Add the actions: read permission to coverity calls

rgacogne · Sep 17, 2024 · d8a6633 · d8a6633
1 parent 7237011
commit d8a6633
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/misc-dailies.yml b/.github/workflows/misc-dailies.yml
@@ -42,6 +42,9 @@ jobs:
   coverity-auth:
     name: coverity scan of the auth
     if: ${{ vars.SCHEDULED_MISC_DAILIES }}
+    permissions:
+      contents: read
+      actions: read # to get workflow details
     uses: PowerDNS/pdns/.github/workflows/coverity.yml@master
     with:
       product: 'authoritative'
@@ -52,6 +55,9 @@ jobs:
   coverity-dnsdist:
     name: coverity scan of dnsdist
     if: ${{ vars.SCHEDULED_MISC_DAILIES }}
+    permissions:
+      contents: read
+      actions: read # to get workflow details
     uses: PowerDNS/pdns/.github/workflows/coverity.yml@master
     with:
       product: 'dnsdist'
@@ -62,6 +68,9 @@ jobs:
   coverity-rec:
     name: coverity scan of the rec
     if: ${{ vars.SCHEDULED_MISC_DAILIES }}
+    permissions:
+      contents: read
+      actions: read # to get workflow details
     uses: PowerDNS/pdns/.github/workflows/coverity.yml@master
     with:
       product: 'recursor'