From 4b8bbb4dc934e274c3ce7f157f11c61b3adea187 Mon Sep 17 00:00:00 2001 From: Jiaren Wu Date: Mon, 13 Oct 2025 10:13:24 -0700 Subject: [PATCH] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/arc-update-runners-scheduled.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/arc-update-runners-scheduled.yaml b/.github/workflows/arc-update-runners-scheduled.yaml index ed083097..f34ac5a4 100644 --- a/.github/workflows/arc-update-runners-scheduled.yaml +++ b/.github/workflows/arc-update-runners-scheduled.yaml @@ -1,6 +1,8 @@ # This workflows polls releases from actions/runner and in case of a new one it # updates files containing runner version and opens a pull request. name: Runner Updates Check (Scheduled Job) +permissions: + contents: read on: schedule: