Potential fix for code scanning alert no. 1: Workflow does not contain permissions (#190)

aaguiarz · github-advanced-security[bot] · jimmyjames · web-flow · commit ff7aa69fdde5 · 2025-08-01T17:46:05.000Z
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
Co-authored-by: Jim Anderson &lt;jim.anderson@okta.com&gt;
diff --git a/.github/workflows/semgrep.yaml b/.github/workflows/semgrep.yaml
@@ -5,6 +5,8 @@ on:
       - main
 jobs:
   semgrep:
+    permissions:
+      contents: read
     name: Scan
     runs-on: ubuntu-latest
     container:
