add permission

nolte · Jan 6, 2024 · 38c7913 · 38c7913
1 parent d94b529
commit 38c7913
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/build-static-tests.yaml b/.github/workflows/build-static-tests.yaml
@@ -4,5 +4,15 @@ on:
 jobs:
   static:
     uses: nolte/gh-plumbing/.github/workflows/[email protected]
+
   security:
     uses: nolte/gh-plumbing/.github/workflows/[email protected]
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+  chain-bench:
+    uses: nolte/gh-plumbing/.github/workflows/[email protected]
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}