fix: osv permissions

2026-04-22 20:06:18 +02:00 · 2025-06-03 15:33:45 +04:00
parent 4c4aa10d8c
commit 4c42099661
2 changed files with 2 additions and 4 deletions
@@ -44,10 +44,9 @@ on:
      - "nodecar/package-lock.json"

 permissions:
-  # Require writing security events to upload SARIF file to security tab
  security-events: write
-  # Read commit contents
  contents: read
+  actions: read

 jobs:
  scan-scheduled:
@@ -7,10 +7,9 @@ on:
    branches: ["main"]

 permissions:
-  # Required for OSV scanner to upload SARIF file to security tab
  security-events: write
-  # Read commit contents
  contents: read
+  actions: read

 jobs:
  lint-js: