Skip to content

fix(codeql): add packages: read and pin gha-security to v2.13.0 #121

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
olereidar merged 3 commits into from
May 29, 2026
Merged

fix(codeql): add packages: read and pin gha-security to v2.13.0 #121

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
eda8d0f
fix(codeql): add packages: read and pin gha-security to v2.13.0
olereidar May 29, 2026
1bb27d6
fix(codeql): set complete CodeQL permissions block per gha-security v…
olereidar May 29, 2026
978a5e9
fix(codeql): update permissions block and pin gha-security to v2
olereidar May 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 4 additions & 10 deletions .github/workflows/codeql.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,16 +17,10 @@ jobs:
name: CodeQL Scan
uses: entur/gha-security/.github/workflows/code-scan.yml@v2
# no secrets necessary
permissions: # some of these only apply when running on the main branch
permissions:
packages: read
security-events: write
actions: read
contents: write
pull-requests: write
security-events: write
issues: write
with:
use_setup_java: true
java_version: "25"
java_distribution: "liberica"
java_server_id_artifactory: entur-partner
use_maven_cache: true
job_runner: grp-ubuntu-24.04-16core-x64
pull-requests: write
Loading