add content:read permission to scorecard workflow (#2261)

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>
This commit is contained in:
Bruce 2025-09-17 12:57:34 -04:00 committed by GitHub
parent 9b0b72d225
commit 4ad19475c9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -17,6 +17,7 @@ jobs:
permissions:
id-token: write
security-events: write
contents: read
extended-tests:
uses: ./.github/workflows/extended.yml