run scan on build as well

babylonlabs-io · Nov 7, 2024 · b83cb68 · b83cb68
1 parent a640d61
commit b83cb68
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -14,7 +14,13 @@ jobs:
      run-lint: true
 
   docker_pipeline:
-    uses: babylonlabs-io/.github/.github/workflows/[email protected]
+    uses: babylonlabs-io/.github/.github/workflows/[email protected]
+    permissions:
+      # required for all workflows
+      security-events: write
+      # required to fetch internal or private CodeQL packs
+      packages: read
     secrets: inherit
     with:
      publish: false
+     docker_scan: true