[fix]: adjust gosec permissions settings according to GHA ref (#1867)

Signed-off-by: Sam Yuan <[email protected]>
sustainable-computing-io · Nov 29, 2024 · a447077 · a447077
1 parent e45f6c4
commit a447077
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml
@@ -6,7 +6,8 @@ on: # yamllint disable-line rule:truthy
   schedule:
     - cron: 12 9 * * *
 
-permissions: read-all
+permissions:
+  security-events: write
 
 jobs:
   # daily go security

diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml
@@ -6,7 +6,8 @@ on: # yamllint disable-line rule:truthy
   workflow_call:
 
 permissions:
-  pull-requests: read
+  security-events: write
+  contents: read
 
 jobs:
   tests: