Fix permissions for CodeQL workflows (#16660)

potiuk · web-flow · commit b8a9e9fba673 · 2021-06-25T19:35:37.000+02:00
After limiting permissions, our CodeQL workflow started failing. This is because it needs some extra permissions as explained in the github/codeql-action#464 This PR adds the required permissions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -67,7 +67,11 @@ jobs:
         # Override automatic language detection by changing the below list
         # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
         language: ['python', 'javascript']
-
+    permissions:
+      actions: read
+      contents: read
+      pull-requests: read
+      security-events: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v2
