Merge pull request #905 from krakend/fix_security_permissions

Add permissions to upload the security reports
krakend · Jul 16, 2024 · c6a9789 · c6a9789
2 parents 4372c13 + 8d443ba
commit c6a9789
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -42,11 +42,13 @@ jobs:
  sarif_file: 'trivy-results.sarif'
 
  image-scan:
+ permissions:
+ security-events: write
+ actions: read
+ contents: read
  strategy:
  matrix:
  config:
- - image: krakend/builder
- dockerfile: Dockerfile-builder
  - image: krakend/krakend-ce
  dockerfile: Dockerfile
  runs-on: ubuntu-latest