From d0458a7dd5750f5bb02d4191ff3e862ab260f00b Mon Sep 17 00:00:00 2001 From: Matt Andreko Date: Fri, 6 Jun 2025 10:31:15 -0400 Subject: [PATCH 1/2] Added explicit permissions to check-run --- .github/workflows/scan.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 6bacdc8..1ef31ac 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -18,10 +18,14 @@ on: permissions: {} +permissions: {} + jobs: check-run: name: Check PR run uses: bitwarden/gh-actions/.github/workflows/check-run.yml@main + permissions: + contents: read sast: name: SAST scan From 7ba88cc2c9d470d99e1ff144e90298a2518da05a Mon Sep 17 00:00:00 2001 From: Matt Andreko Date: Mon, 9 Jun 2025 09:40:33 -0400 Subject: [PATCH 2/2] Fixed duplicate permissions entry from rebase --- .github/workflows/scan.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 1ef31ac..456889d 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -18,8 +18,6 @@ on: permissions: {} -permissions: {} - jobs: check-run: name: Check PR run