Skip to content

Commit

Permalink
reducing permissions
Browse files Browse the repository at this point in the history
  • Loading branch information
stan-dot committed Jan 20, 2025
1 parent 0a6fcc6 commit 999ec8c
Showing 1 changed file with 2 additions and 13 deletions.
15 changes: 2 additions & 13 deletions .github/workflows/_codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,8 @@ name: "CodeQL"

on:
workflow_call:
push:
# the line above with 'push' is temporary to test without relying on the periodic part

jobs:
analyze:
Expand All @@ -14,19 +16,6 @@ jobs:
# required for all workflows
security-events: write

# required to fetch internal or private CodeQL packs
packages: read

# only required for workflows in private repositories
actions: read
contents: read

strategy:
fail-fast: false
matrix:
include:
- language: python
build-mode: none
steps:
- name: Checkout repository
uses: actions/checkout@v4
Expand Down

0 comments on commit 999ec8c

Please sign in to comment.