From 4a5c81beed5efc751f9f6f0fbe2f5c11bf4d3610 Mon Sep 17 00:00:00 2001 From: Maksim Nabokikh Date: Sun, 15 Feb 2026 22:01:09 +0100 Subject: [PATCH] Add permissions section to trivydb-cache workflow Add permissions for reading contents in the workflow Signed-off-by: Maksim Nabokikh --- .github/workflows/trivydb-cache.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/trivydb-cache.yaml b/.github/workflows/trivydb-cache.yaml index cc17df24..fc912b2a 100644 --- a/.github/workflows/trivydb-cache.yaml +++ b/.github/workflows/trivydb-cache.yaml @@ -7,6 +7,9 @@ on: - cron: '0 0 * * *' # Run daily at midnight UTC workflow_dispatch: # Allow manual triggering +permissions: + contents: read + jobs: update-trivy-db: runs-on: ubuntu-latest