From 90ff91ece76f835ba6b2c3d516e16952e6fd5e03 Mon Sep 17 00:00:00 2001 From: Jiaren Wu Date: Tue, 28 Oct 2025 09:17:42 -0700 Subject: [PATCH] Potential fix for code scanning alert no. 5: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/arc-release-runners.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/arc-release-runners.yaml b/.github/workflows/arc-release-runners.yaml index a30fbe53..54bd9772 100644 --- a/.github/workflows/arc-release-runners.yaml +++ b/.github/workflows/arc-release-runners.yaml @@ -1,4 +1,6 @@ name: Release ARC Runner Images +permissions: + contents: read # Revert to https://github.com/actions-runner-controller/releases#releases # for details on why we use this approach