From aa4d4fe315eacae655803cf56c9bd65a7c7eeac4 Mon Sep 17 00:00:00 2001 From: Brennan Kinney <5098581+polarathene@users.noreply.github.com> Date: Sat, 4 Mar 2023 03:32:00 +1300 Subject: [PATCH] ci(fix): Only apply permissions at the job level (#3142) If permissions are specified at the workflow level, any that are not explicitly set became `none` and jobs cannot request that to change. Permissions are therefore scoped to the job itself. --- .github/workflows/generic_vulnerability-scan.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/generic_vulnerability-scan.yml b/.github/workflows/generic_vulnerability-scan.yml index 9f28743e..84022bcb 100644 --- a/.github/workflows/generic_vulnerability-scan.yml +++ b/.github/workflows/generic_vulnerability-scan.yml @@ -14,9 +14,6 @@ on: required: true type: string -permissions: - contents: read - jobs: scan-image: permissions: