This is an automated email from the ASF dual-hosted git repository.
ggregory pushed a commit to branch release
in repository https://gitbox.apache.org/repos/asf/commons-csv.git
The following commit(s) were added to refs/heads/release by this push:
new 540c778a Update for Scorecards 2
540c778a is described below
commit 540c778ad3102966d00f5b3084993c07762a91bf
Author: Gary Gregory <garydgreg...@gmail.com>
AuthorDate: Sun Oct 23 15:05:14 2022 -0400
Update for Scorecards 2
---
.github/workflows/scorecards-analysis.yml | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/scorecards-analysis.yml
b/.github/workflows/scorecards-analysis.yml
index b75c5005..5ce7f780 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -22,10 +22,8 @@ on:
push:
branches: [ "master" ]
-permissions:
- id-token: write # This is required for requesting the JWT
- contents: read # This is required for actions/checkout
-
+permissions: read-all
+
jobs:
analysis:
@@ -33,9 +31,11 @@ jobs:
name: "Scorecards analysis"
runs-on: ubuntu-latest
permissions:
- security-events: write # Needed to upload the results to the
code-scanning dashboard.
+ # Needed to upload the results to the code-scanning dashboard.
+ security-events: write
actions: read
- contents: read
+ id-token: write # This is required for requesting the JWT
+ contents: read # This is required for actions/checkout
steps:
