Fix SARIF GH permissions

electrocucaracha · Oct 2, 2024 · e8c2700 · e8c2700
1 parent 9c29186
commit e8c2700
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/.github/actions/docker-image/action.yml b/.github/actions/docker-image/action.yml
@@ -34,3 +34,4 @@ runs:
       uses: github/codeql-action/upload-sarif@86b04fb0e47484f7282357688f21d5d0e32175fe # 3.26.9
       with:
         sarif_file: results.sarif
+        category: "${{ inputs.image }}"
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -24,6 +24,8 @@ permissions: read-all
 jobs:
   build-baremetal:
     name: Check building and publishing Kolla Docker images in a local Docker registry on an Ubuntu Jammy Virtual Environment
+    permissions:
+      security-events: write
     runs-on: ubuntu-22.04
     if: >-
       (