From b7bbc2fe790f010d7047b07d1303ab592293bdd5 Mon Sep 17 00:00:00 2001 From: sfc-gh-jfan Date: Mon, 16 Oct 2023 16:34:38 -0700 Subject: [PATCH] PRODSEC-3611 fix GHA parsing --- .github/workflows/snyk-issue.yml | 5 +++++ .github/workflows/snyk-pr.yml | 6 ++++++ 2 files changed, 11 insertions(+) diff --git a/.github/workflows/snyk-issue.yml b/.github/workflows/snyk-issue.yml index 7098b01e..c8f5d90b 100644 --- a/.github/workflows/snyk-issue.yml +++ b/.github/workflows/snyk-issue.yml @@ -4,6 +4,11 @@ on: schedule: - cron: '* */12 * * *' +permissions: + contents: read + issues: write + pull-requests: write + concurrency: snyk-issue jobs: diff --git a/.github/workflows/snyk-pr.yml b/.github/workflows/snyk-pr.yml index 51e531f4..b951af65 100644 --- a/.github/workflows/snyk-pr.yml +++ b/.github/workflows/snyk-pr.yml @@ -3,6 +3,12 @@ on: pull_request: branches: - main + +permissions: + contents: read + issues: write + pull-requests: write + jobs: snyk: runs-on: ubuntu-latest