net 10 upgraded#256
Conversation
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 5 months ago
To fix this problem, add an explicit permissions: block to the workflow, ideally at the root level. This applies to all jobs unless per-job overrides are needed. Review the workflow steps to select the minimal permissions required: the workflow only needs access to release contents (for artifact upload/download), so contents: read and possibly contents: write may be required (for release asset uploads), but since none of the jobs appear to use pull requests or issues, those permissions can be omitted. Set the following at the root, just after the workflow name: (e.g. after line 1):
permissions:
contents: writeThis change should be made in the .github/workflows/createrelease.yml file, after the name: Release line and before on:. No additional imports or definitions are required.
| @@ -1,4 +1,6 @@ | ||
| name: Release | ||
| permissions: | ||
| contents: write | ||
|
|
||
| on: | ||
| release: |
closes #252
closes #253
closes #251
closes #255