Skip to content

Commit

Permalink
Update permissions in Trivy GitHub Actions workflow
Browse files Browse the repository at this point in the history
Updated permissions in the GitHub Actions workflow to allow write access for contents. This ensures that the Trivy vulnerability scanner can properly execute its tasks when triggered by push or pull requests on the main branch. The changes aim to streamline the workflow and improve integration with the repository.
  • Loading branch information
siddhantprateek authored Feb 23, 2024
1 parent fed8d80 commit 27cff7a
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion .github/workflows/trivy-vulnerability.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,8 @@ on:
- main
pull_request:

permissions:
contents: write

jobs:
build:
Expand All @@ -29,4 +31,4 @@ jobs:
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'trivy-results.sarif'
sarif_file: 'trivy-results.sarif'

0 comments on commit 27cff7a

Please sign in to comment.