Skip to content

Commit 06bda71

Browse files
authored
update gha with permissions (#1931)
* update gha with permissions * delete unused components
1 parent 195b071 commit 06bda71

6 files changed

+9
-131
lines changed

src/components/code_snippets/_gha-semgrep-app-sast-dash.mdx

+3
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,9 @@ on:
1515
- cron: '20 17 * * *' # Sets Semgrep to scan every day at 17:20 UTC.
1616
# It is recommended to change the schedule to a random time.
1717

18+
permissions:
19+
contents: read
20+
1821
jobs:
1922
semgrep:
2023
# User definable name of this GitHub Actions job.

src/components/code_snippets/_gha-semgrep-app-sast.mdx

+3
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,9 @@ on:
2525
- cron: '20 17 * * *' # Sets Semgrep to scan every day at 17:20 UTC.
2626
# It is recommended to change the schedule to a random time.
2727

28+
permissions:
29+
contents: read
30+
2831
jobs:
2932
semgrep:
3033
# User definable name of this GitHub Actions job.

src/components/code_snippets/_gha-semgrep-app-ssc.mdx

-49
This file was deleted.

src/components/code_snippets/_gha-semgrep-app-standalone-dash.mdx

-43
This file was deleted.

src/components/code_snippets/_gha-semgrep-app-standalone.mdx

-39
This file was deleted.

src/components/code_snippets/_gha-semgrep-oss-sast.mdx

+3
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,9 @@ on:
2121
- cron: '20 17 * * *' # Sets Semgrep to scan every day at 17:20 UTC.
2222
# It is recommended to change the schedule to a random time.
2323

24+
permissions:
25+
contents: read
26+
2427
jobs:
2528
semgrep:
2629
# User definable name of this GitHub Actions job.

0 commit comments

Comments
 (0)