Merge pull request #797 from microsoftgraph/andrueastman-patch-1

Fix codeQl permissions
microsoftgraph · Feb 9, 2024 · 7f1b148 · 7f1b148
2 parents 3415eac + 98f4c6f
commit 7f1b148
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/validatePullRequest.yml b/.github/workflows/validatePullRequest.yml
@@ -7,6 +7,11 @@ on:
   pull_request:
     branches: [ 'feature/5.0', 'master' ]
 
+permissions:
+  contents: read #those permissions are required to run the codeql analysis
+  actions: read
+  security-events: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -54,4 +59,4 @@ jobs:
     - name: Build for netstandard2.0
       run: dotnet build ${{ env.projectName }} -f netstandard2.0 --no-restore -c Release --no-incremental
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v3