From 4cf9dc79b0ab53ab34db69b129a73362157bc276 Mon Sep 17 00:00:00 2001 From: Ryan Trauntvein Date: Thu, 2 Jul 2026 19:29:09 -0700 Subject: [PATCH] Potential fix for code scanning alert no. 17: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/test-scan.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/test-scan.yml b/.github/workflows/test-scan.yml index 388f2a7..83aeb7e 100644 --- a/.github/workflows/test-scan.yml +++ b/.github/workflows/test-scan.yml @@ -13,6 +13,9 @@ on: # Allows you to run this workflow manually from the Actions tab workflow_dispatch: +permissions: + contents: read + # A workflow run is made up of one or more jobs that can run sequentially or in parallel jobs: # This workflow contains a single job called "build"