From 95d2a9233b8d89646e942e045c2f45bcd0e165a3 Mon Sep 17 00:00:00 2001
From: huynaism <huyna.sj@gmail.com>
Date: Tue, 29 Oct 2024 19:13:35 +0700
Subject: [PATCH] permission

---
 .github/workflows/publish.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 75d025a..aaf22ae 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,6 +18,11 @@ jobs:
 
   docker_pipeline:
     needs: ["lint_test"]
+    permissions:
+      # required for all workflows
+      security-events: write
+      # required to fetch internal or private CodeQL packs
+      packages: read
     uses: babylonlabs-io/.github/.github/workflows/reusable_docker_pipeline.yml@huy/add-docker-sec
     secrets: inherit
     with: