Added required permissions in the action example

_templates/README.md.erb

@@ -68,6 +68,12 @@ name: Example workflow for <%= @name %> using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

cocoapods/README.md

@@ -61,6 +61,12 @@ name: Example workflow for CocoaPods using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

dotnet/README.md

@@ -61,6 +61,12 @@ name: Example workflow for dotNET using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

golang/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Golang using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

gradle-jdk11/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Gradle using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

gradle-jdk12/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Gradle using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

gradle-jdk14/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Gradle using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

gradle-jdk16/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Gradle using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

gradle/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Gradle using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

maven-3-jdk-11/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Maven using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

maven/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Maven using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

node/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Node using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

php/README.md

@@ -61,6 +61,12 @@ name: Example workflow for PHP using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

python-3.6/README.md

@@ -68,6 +68,12 @@ name: Example workflow for Python using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

python-3.7/README.md

@@ -68,6 +68,12 @@ name: Example workflow for Python using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

python-3.8/README.md

@@ -68,6 +68,12 @@ name: Example workflow for Python using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

python/README.md

@@ -68,6 +68,12 @@ name: Example workflow for Python using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

ruby/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Ruby using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master

scala/README.md

@@ -61,6 +61,12 @@ name: Example workflow for Scala using Snyk
 on: push
 jobs:
   security:
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master