Add actions read permission for Trivy scan job (#1355)

BryanFauble · web-flow · commit c921be9a1c38 · 2026-04-10T00:26:40.000Z
diff --git a/.github/workflows/trivy_periodic_scan.yml b/.github/workflows/trivy_periodic_scan.yml
@@ -86,6 +86,7 @@ jobs:
       deployments: write
       security-events: write
       packages: write
+      actions: read # Required by docker_build.yml's nested trivy-scan job
 
   # Only create the git tag after the rebuilt image passes Trivy and is pushed
   create-tag:
