Merge pull request #10 from codeplaysoftware/security-improvements

Security and Performance Improvements
codeplaysoftware · Jul 12, 2024 · c2bb4d5 · c2bb4d5
2 parents da72388 + 7ed9f2f
commit c2bb4d5
Show file tree

Hide file tree

Showing 36 changed files with 1,721 additions and 1,573 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -8,22 +8,16 @@ on:
   schedule:
     - cron: '31 11 * * 2'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
     runs-on: 'ubuntu-latest'
     timeout-minutes: 360
     permissions:
-      # required for all workflows
       security-events: write
 
-      # required to fetch internal or private CodeQL packs
-      packages: read
-
-      # only required for workflows in private repositories
-      actions: read
-      contents: read
-
     strategy:
       fail-fast: false
       matrix: