Skip to content

Commit defc947

Browse files
authored
ci: declare permissions on security_audit workflow (#718)
rustsec/audit-check creates a GitHub issue when new advisories appear in the Rust dependency tree, so the workflow needs: contents: read for actions/checkout issues: write for the audit-check action to file its tracking issue Signed-off-by: Arpit Jain <arpitjain099@gmail.com>
1 parent 2912565 commit defc947

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

.github/workflows/security_audit.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,11 @@ name: Security audit
22
on:
33
schedule:
44
- cron: '0 0 * * *'
5+
6+
permissions:
7+
contents: read # actions/checkout
8+
issues: write # rustsec/audit-check opens a tracking issue when new advisories appear
9+
510
jobs:
611
audit:
712
runs-on: ubuntu-24.04

0 commit comments

Comments
 (0)