Fix issue notification workflow permissions (#3952)

microsoft · Nov 13, 2024 · 8c2d9e6 · 8c2d9e6
1 parent 88b28f6
commit 8c2d9e6
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/codeql-daily.yml b/.github/workflows/codeql-daily.yml
@@ -35,6 +35,8 @@ jobs:
         uses: github/codeql-action/analyze@v3
 
   scheduled-job-notification:
+    permissions:
+      issues: write
     needs:
       - analyze
     if: always()

diff --git a/.github/workflows/owasp-dependency-check-daily.yml b/.github/workflows/owasp-dependency-check-daily.yml
@@ -30,7 +30,8 @@ jobs:
           path: agent/agent/build/reports
 
   scheduled-job-notification:
-    permissions: write-all
+    permissions:
+      issues: write
     needs:
       - analyze
     if: always()

diff --git a/.github/workflows/reusable-scheduled-job-notification.yml b/.github/workflows/reusable-scheduled-job-notification.yml
@@ -9,6 +9,8 @@ on:
 
 jobs:
   notify-if-needed:
+    permissions:
+      issues: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4