Skip to content

Commit c433a30

Browse files
fix(ci): Add security-events permission to Docker workflow (#25)
The Docker Build workflow was failing when uploading Trivy security scan results because it lacked the 'security-events: write' permission required by the github/codeql-action/upload-sarif action. Error: Resource not accessible by integration This adds the missing permission to allow SARIF uploads to GitHub Security.
1 parent fe2e564 commit c433a30

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

.github/workflows/docker.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ jobs:
1919
permissions:
2020
contents: read
2121
packages: write
22+
security-events: write
2223

2324
steps:
2425
- name: Checkout code

0 commit comments

Comments
 (0)