Add permissions block to top workflow level

Signed-off-by: temenuzhka-thede <[email protected]>
docker-archive · Oct 27, 2023 · afb5017 · afb5017
1 parent 5eca716
commit afb5017
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -20,19 +20,20 @@ on:
       - '**/*.yml'
       - '**/*_test.go'
 
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
 jobs:
   analyze:
     name: Analyze
     runs-on: 'ubuntu-latest'
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
     strategy:
       fail-fast: false
       matrix:
-        language: [go]
+        language: 
+          - go
 
     steps:
     -