ci: SHA-pin 12 third-party GitHub Actions references #101
mmguerologstash-build-and-push-ghcr.yml
on: push
Matrix: docker / docker
Waiting for pending jobs
Annotations
1 error
|
Invalid workflow file:
.github/workflows/logstash-build-and-push-ghcr.yml#L24
The workflow is not valid. .github/workflows/logstash-build-and-push-ghcr.yml (Line: 24, Col: 3): Error calling workflow 'cisagov/Malcolm/.github/workflows/docker-build-push-scan.yml@0b3b9efbf81312ae14a198a8c46e340bd4e32d35'. The nested job 'docker' is requesting 'actions: write, packages: write, security-events: write', but is only allowed 'actions: none, packages: read, security-events: none'.
|