Removed write-all (intel#91)

Signed-off-by: phansGithub <[email protected]>
redhat-et · Jan 15, 2024 · 145696b · 145696b
1 parent 49bd136
commit 145696b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/public-ci.yml b/.github/workflows/public-ci.yml
@@ -120,7 +120,9 @@ jobs:
 # Trivy Scan
   trivy-scan:
     runs-on: ubuntu-latest
-    permissions: write-all
+    permissions: 
+      contents: read
+      security-events: write
     steps: 
 
     - name: Checkout code