Fix permissions for poutine_analysis job (#2246)

* Fix permissions for poutine_analysis job

Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>

* supplychain job permissions in commit-to-main

Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>

---------

Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
This commit is contained in:
Douglas Stebila 2025-08-27 16:20:40 -04:00 committed by GitHub
parent c62031ee75
commit 475208af5f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 1 deletions

View File

@ -22,6 +22,7 @@ jobs:
permissions:
id-token: write
security-events: write
contents: read
basic-downstream:
uses: ./.github/workflows/downstream-basic.yml

View File

@ -1,6 +1,7 @@
name: Scorecard supply-chain security
permissions: {}
permissions:
contents: read
on:
# For Branch-Protection check. Only the default branch is supported. See