From 3e55276be1554e1d7de9f722b19591d22ef7f0b0 Mon Sep 17 00:00:00 2001 From: Kurt Garloff Date: Wed, 17 Dec 2025 09:27:46 +0100 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Kurt Garloff --- .github/workflows/ansible-lint.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ansible-lint.yml b/.github/workflows/ansible-lint.yml index 9b0c2bcd..f511cd20 100644 --- a/.github/workflows/ansible-lint.yml +++ b/.github/workflows/ansible-lint.yml @@ -1,5 +1,7 @@ --- name: Ansible lint +permissions: + contents: read "on": push: From 3dc7e9fc2a2d7b566c050cfe09ca42f99938b0f8 Mon Sep 17 00:00:00 2001 From: Kurt Garloff Date: Wed, 17 Dec 2025 09:47:57 +0100 Subject: [PATCH 2/2] Fix the yaml syntax check action permissions as well. Signed-off-by: Kurt Garloff --- .github/workflows/check-yaml-syntax.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/check-yaml-syntax.yml b/.github/workflows/check-yaml-syntax.yml index c61dd341..e9c614ce 100644 --- a/.github/workflows/check-yaml-syntax.yml +++ b/.github/workflows/check-yaml-syntax.yml @@ -1,5 +1,7 @@ --- name: Check yaml syntax +permissions: + contents: read "on": push: