pohui_pohui/firmware
1
0
Fork 0
mirror of https://github.com/meshtastic/firmware.git synced 2025-06-09 14:42:05 +00:00
Code Issues Actions 5 Packages Projects Releases Wiki Activity

Give Semgrep permission to write its report (#6253)

Browse Source 
Previously semgrep had read-all permission. This patch limits read
slightly and adds write permissions to security-events.
This commit is contained in:
Tom Fifield 2025-03-07 08:52:54 +08:00 committed by GitHub
parent f7afa9a81e
commit f0a2ae9ff3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
.github/workflows/sec_sast_semgrep_cron.yml vendored
View File

@ -6,7 +6,10 @@ on:
schedule:
- cron: 0 1 * * 6
permissions: read-all
permissions:
actions: read
contents: read
security-events: write
jobs:
semgrep-full: