Repository navigation
Commit 89dbd4a
committed
Remove unnecessary permissions from codeql.yml
This is another change back to the way we had it before, but the
removals are based specifically on the guidance in the default
workflow comments about why each permission was given by default.1 parent d7ce09f commit 89dbd4a
1 file changed
Lines changed: 0 additions & 8 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -27,16 +27,8 @@ jobs: | |||
| 27 | 27 | # Consider using larger runners or machines with greater resources for possible analysis time improvements. | |
| 28 | 28 | runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }} | |
| 29 | 29 | permissions: | |
| 30 | - # required for all workflows | ||
| 31 | 30 | security-events: write | |
| 32 | 31 | ||
| 33 | - # required to fetch internal or private CodeQL packs | ||
| 34 | - packages: read | ||
| 35 | - | ||
| 36 | - # only required for workflows in private repositories | ||
| 37 | - actions: read | ||
| 38 | - contents: read | ||
| 39 | - | ||
| 40 | 32 | strategy: | |
| 41 | 33 | fail-fast: false | |
| 42 | 34 | matrix: | |
0 commit comments