Browse Source

Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
pull/3351/head
Nat Dean-Lewis 2 weeks ago committed by GitHub
parent
commit
678c3d3676
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 2
      .github/workflows/production_pipeline.yml

2
.github/workflows/production_pipeline.yml

@ -24,6 +24,8 @@ jobs:
sbom: sbom:
name: Upload SBOM name: Upload SBOM
needs: [aws_deploy] needs: [aws_deploy]
permissions:
contents: read
uses: ./.github/workflows/upload-sbom.yml uses: ./.github/workflows/upload-sbom.yml
with: with:
projectversion: prod projectversion: prod

Loading…
Cancel
Save