Add read permissions for Trivy scan in pipeline

RISDEV-4542
digitalservicebund · Aug 14, 2024 · 0c7c868 · 0c7c868
1 parent 6f3a70c
commit 0c7c868
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
@@ -22,6 +22,7 @@ jobs:
   trivy-scan:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       security-events: write # upload-sarif
     steps:
       - name: Checkout code