fix action permissions

scrayosnet · Jan 29, 2024 · 012c00d · 012c00d
1 parent 02943c3
commit 012c00d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
@@ -14,6 +14,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+      actions: read
+      security-events: write
     steps:
 
     - name: Checkout repository
@@ -63,6 +65,6 @@ jobs:
     - name: Upload SARIF result
       id: upload-sarif
       if: ${{ github.event_name != 'pull_request_target' }}
-      uses: github/codeql-action/upload-sarif@v2
+      uses: github/codeql-action/upload-sarif@v3
       with:
         sarif_file: sarif.output.json