Skip to content

Commit 8d0f7f1

Browse files
Potential fix for code scanning alert no. 10: Workflow does not contain permissions (#17)
Signed-off-by: Yuniel Acosta Pérez <33158051+yacosta738@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 1948017 commit 8d0f7f1

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.github/workflows/dependabot-auto-merge.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@ name: Auto-merge dependencies
22
on:
33
pull_request:
44
types: [opened, synchronize, reopened]
5+
permissions:
6+
contents: read
7+
pull-requests: write
58
jobs:
69
auto-merge:
710
uses: dallay/common-actions/.github/workflows/dependabot-auto-merge.yml@v2.1.0

0 commit comments

Comments
 (0)