mirror of
https://github.com/fluxcd/flux2.git
synced 2026-02-24 08:31:47 +00:00
Updated scan & update permissions
Signed-off-by: Eddie Knight <knight@linux.com>
This commit is contained in:
parent
939a75115c
commit
2abf932ee4
2 changed files with 5 additions and 0 deletions
2
.github/workflows/scan.yaml
vendored
2
.github/workflows/scan.yaml
vendored
|
|
@ -27,6 +27,8 @@ jobs:
|
||||||
|
|
||||||
snyk:
|
snyk:
|
||||||
name: Snyk
|
name: Snyk
|
||||||
|
permisions:
|
||||||
|
security-events: write
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
if: (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
|
if: (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
|
||||||
steps:
|
steps:
|
||||||
|
|
|
||||||
3
.github/workflows/update.yaml
vendored
3
.github/workflows/update.yaml
vendored
|
|
@ -12,6 +12,9 @@ permissions:
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
update-components:
|
update-components:
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
pull-requests: write
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Check out code
|
- name: Check out code
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue