Try to fix trivy with permissions (#2181)

* fix_trivy_scan_2_rolbak_action * Try to fix trivy with permissions Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com> --------- Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2025-01-09 13:46:12 +02:00
parent e36aa8a5e7
commit 0393a4a389
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -11,6 +11,10 @@ jobs:
  scan:
    runs-on: ubuntu-latest

+    # seems needed for github/codeql-action/upload-sarif
+    permissions:
+      actions: write
+
    steps:
      - name: Checkout code
        uses: actions/checkout@v4