From f68e805095ba86f152864aa81dd12fe24f3401f2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sebasti=C3=A1n=20L=C3=B3pez=20O?= Date: Thu, 17 Jul 2025 17:05:55 -0500 Subject: [PATCH] Potential fix for code scanning alert no. 7: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/defender-for-devops.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/defender-for-devops.yml b/.github/workflows/defender-for-devops.yml index e906a4c..108d501 100644 --- a/.github/workflows/defender-for-devops.yml +++ b/.github/workflows/defender-for-devops.yml @@ -18,6 +18,10 @@ name: "Microsoft Defender For Devops" +permissions: + contents: read + security-events: write + on: push: branches: [ "main" ]