From d8a6633aa1f2d8eecba9976cd46e8bdd3ca7bb6b Mon Sep 17 00:00:00 2001
From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Tue, 17 Sep 2024 14:48:29 +0200
Subject: [PATCH] misc-dailies: Add the `actions: read` permission to coverity
 calls

---
 .github/workflows/misc-dailies.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/misc-dailies.yml b/.github/workflows/misc-dailies.yml
index e70c4309c03f..10299714d54a 100644
--- a/.github/workflows/misc-dailies.yml
+++ b/.github/workflows/misc-dailies.yml
@@ -42,6 +42,9 @@ jobs:
   coverity-auth:
     name: coverity scan of the auth
     if: ${{ vars.SCHEDULED_MISC_DAILIES }}
+    permissions:
+      contents: read
+      actions: read # to get workflow details
     uses: PowerDNS/pdns/.github/workflows/coverity.yml@master
     with:
       product: 'authoritative'
@@ -52,6 +55,9 @@ jobs:
   coverity-dnsdist:
     name: coverity scan of dnsdist
     if: ${{ vars.SCHEDULED_MISC_DAILIES }}
+    permissions:
+      contents: read
+      actions: read # to get workflow details
     uses: PowerDNS/pdns/.github/workflows/coverity.yml@master
     with:
       product: 'dnsdist'
@@ -62,6 +68,9 @@ jobs:
   coverity-rec:
     name: coverity scan of the rec
     if: ${{ vars.SCHEDULED_MISC_DAILIES }}
+    permissions:
+      contents: read
+      actions: read # to get workflow details
     uses: PowerDNS/pdns/.github/workflows/coverity.yml@master
     with:
       product: 'recursor'