Merge branch 'lukas/gh/maint-27' into maint-27

* lukas/gh/maint-27:
  gh: Update permissions to run in private repo

Author: garazdawi

.github/workflows/license-scanner.yaml

@@ -27,6 +27,7 @@ on:
 
 permissions:
   contents: read
+  pull-requests: read
 
 jobs:
   run-scan:
@@ -69,7 +70,7 @@ jobs:
   upload-scan:
     needs: run-scan
     runs-on: ubuntu-latest
-    if: ${{ !cancelled() }}
+    if: ${{ !cancelled() && github.repository == 'erlang/otp' }}
     permissions:
       # Required to upload SARIF file to CodeQL.
       # See: https://github.com/github/codeql-action/issues/2117

.github/workflows/main.yaml

@@ -50,6 +50,7 @@ env:
 
 permissions:
   contents: read
+  pull-requests: read
 
 jobs:
 

.github/workflows/osv-scanner-scheduled.yml

@@ -86,3 +86,5 @@ jobs:
         actions: read
         contents: read
     uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@764c91816374ff2d8fc2095dab36eecd42d61638" # ratchet:google/osv-scanner-action/.github/workflows/[email protected]
+    with:
+        upload-sarif: ${{ github.repository == 'erlang/otp' }}