From c709994d279aafa6a80c7f1be9f98e8338c15e96 Mon Sep 17 00:00:00 2001 From: Andrew Eisenberg Date: Fri, 16 Feb 2024 15:09:31 -0800 Subject: [PATCH 1/2] Add permissions info to README --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 261cdec300..43a343a40d 100644 --- a/README.md +++ b/README.md @@ -16,6 +16,10 @@ We recommend using default setup to configure CodeQL analysis for your repositor You can also configure advanced setup for a repository to find security vulnerabilities in your code using a highly customizable code scanning configuration. For more information, see "[Configuring advanced setup for code scanning](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)" and "[Customizing your advanced setup for code scanning](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning)." +### Permissions + +All advanced setup Code Scanning workflows must have the `security-events: write` permission. Workflows in private repositories muse additionally have the `contents: read` permission. For more information, see [Assigning permissions to jobs](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs). + ## Supported versions of the CodeQL Action The following versions of the CodeQL Action are currently supported: From 36c51ac2b5abbdffd22f44a746f1882962308885 Mon Sep 17 00:00:00 2001 From: Andrew Eisenberg Date: Tue, 20 Feb 2024 10:46:27 -0800 Subject: [PATCH 2/2] Capitalize Code Scanning Co-authored-by: Henry Mercer --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 43a343a40d..6b2962fd3b 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ You can also configure advanced setup for a repository to find security vulnerab ### Permissions -All advanced setup Code Scanning workflows must have the `security-events: write` permission. Workflows in private repositories muse additionally have the `contents: read` permission. For more information, see [Assigning permissions to jobs](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs). +All advanced setup code scanning workflows must have the `security-events: write` permission. Workflows in private repositories muse additionally have the `contents: read` permission. For more information, see [Assigning permissions to jobs](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs). ## Supported versions of the CodeQL Action pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy