ci: add required permissions

barmac · web-flow · commit 9c057dee787b · 2026-01-31T13:45:02.000+01:00
diff --git a/.github/workflows/CODE_SCANNING.yml b/.github/workflows/CODE_SCANNING.yml
@@ -19,6 +19,10 @@ jobs:
       # required for all workflows
       security-events: write
 
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
