Compare commits

...

7 Commits

Author SHA1 Message Date
Henning Makholm
cb5810848d Merge pull request #470 from github/hmakholm/pr/2.5.3
update bundle to 20210430
2021-04-30 19:02:00 +02:00
Henning Makholm
7ab95f642d update bundle to 20210430 2021-04-30 18:26:08 +02:00
Chris Gavin
33bb16c8b4 Merge pull request #457 from github/restrict-permissions
Restrict Actions token permissions in CodeQL workflow.
2021-04-30 14:19:45 +01:00
Chris Gavin
d879f4b84e Merge branch 'main' into restrict-permissions 2021-04-30 13:55:34 +01:00
Chris Gavin
e305db89c2 Fix the token permissions for private copies of the CodeQL Action, and for runs that are not from pull requests. 2021-04-30 13:47:54 +01:00
Chris Gavin
643bc6e3ed Remove spurious blank line. 2021-04-22 17:26:26 +01:00
Chris Gavin
7e85b5d66a Restrict Actions token permissions in CodeQL workflow. 2021-04-22 17:07:03 +01:00
3 changed files with 12 additions and 2 deletions

View File

@@ -13,6 +13,11 @@ jobs:
outputs: outputs:
versions: ${{ steps.compare.outputs.versions }} versions: ${{ steps.compare.outputs.versions }}
permissions:
actions: read
contents: read
security-events: write
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@v2
- name: Init with default CodeQL bundle from the VM image - name: Init with default CodeQL bundle from the VM image
@@ -59,6 +64,11 @@ jobs:
tools: ${{ fromJson(needs.check-codeql-versions.outputs.versions) }} tools: ${{ fromJson(needs.check-codeql-versions.outputs.versions) }}
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
permissions:
actions: read
contents: read
security-events: write
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@v2
- uses: ./init - uses: ./init

View File

@@ -1,3 +1,3 @@
{ {
"bundleVersion": "codeql-bundle-20210421" "bundleVersion": "codeql-bundle-20210430"
} }

View File

@@ -1,3 +1,3 @@
{ {
"bundleVersion": "codeql-bundle-20210421" "bundleVersion": "codeql-bundle-20210430"
} }