Commit aa8ad12
Potential fix for code scanning alert no. 63: Workflow does not contain permissions (#68)
Potential fix for
[https://github.com/AlexJSully/Small-Dev-Talk/security/code-scanning/63](https://github.com/AlexJSully/Small-Dev-Talk/security/code-scanning/63)
To fix the problem, add an explicit `permissions` block to the workflow
or the job to limit the permissions of the `GITHUB_TOKEN` to the minimum
necessary. Since this Markdown lint job does not need any write access
to the repository, you should add `permissions: contents: read` as
either a top-level key (applies to all jobs) or at the job level. Since
there is only one job, both approaches work, but top-level is preferable
for simplicity and is the most common practice. Edit
`.github/workflows/markdown-lint.yaml` to insert the following after the
`name:` line and before `on:` (i.e., after line 1).
_Suggested fixes powered by Copilot Autofix. Review carefully before
merging._
---------
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>1 parent 7edccab commit aa8ad12
1 file changed
Lines changed: 2 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
| 2 | + | |
| 3 | + | |
2 | 4 | | |
3 | 5 | | |
4 | 6 | | |
| |||
0 commit comments