ci: fix missing CodeQL workflow permissions

beeme1mr · web-flow · commit 4883ab47d82a · 2024-01-09T13:36:55.000-05:00
Signed-off-by: Michael Beemer &lt;beeme1mr@users.noreply.github.com&gt;
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -68,7 +68,10 @@ jobs:
 
   sast:
     runs-on: ubuntu-latest
-
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
