From 9570b6d6050b812c5e9601f59acadee143137a12 Mon Sep 17 00:00:00 2001
From: zhom <2717306+zhom@users.noreply.github.com>
Date: Tue, 17 Jun 2025 06:28:34 +0400
Subject: [PATCH] build: fix codeql permissions

---
 .github/workflows/release.yml         | 3 +++
 .github/workflows/rolling-release.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 17b96c1..814b520 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -41,6 +41,9 @@ jobs:
     name: CodeQL
     uses: ./.github/workflows/codeql.yml
     secrets: inherit
+    permissions:
+      security-events: write
+      actions: read
 
   spellcheck:
     name: Spell Check
diff --git a/.github/workflows/rolling-release.yml b/.github/workflows/rolling-release.yml
index 9207e80..b9d2f47 100644
--- a/.github/workflows/rolling-release.yml
+++ b/.github/workflows/rolling-release.yml
@@ -40,6 +40,9 @@ jobs:
     name: CodeQL
     uses: ./.github/workflows/codeql.yml
     secrets: inherit
+    permissions:
+      security-events: write
+      actions: read
 
   spellcheck:
     name: Spell Check