added the necessary permissions to the security job in your .github/workflows/cicd.yml file.

Author: darestack

.github/workflows/cicd.yml

@@ -99,6 +99,12 @@ jobs:
   security:
     name: Security Scan
     runs-on: ubuntu-latest
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     steps:
       - name: Checkout code
         uses: actions/checkout@v4