lets try permission on target repo

babylonlabs-io · Oct 29, 2024 · 8ae00c8 · 8ae00c8
1 parent 5b1e661
commit 8ae00c8
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -17,6 +17,11 @@ jobs:
      run-lint: true
 
   docker_pipeline:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # required to fetch internal or private CodeQL packs
+      packages: read
     needs: ["lint_test"]
     uses: babylonlabs-io/.github/.github/workflows/reusable_docker_pipeline.yml@huy/add-docker-sec
     secrets: inherit