Skip to content

Conversation

@kusold
Copy link
Owner

@kusold kusold commented Feb 1, 2026

Problem

The Docker Security Scan workflow was failing with a 403 error when trying to create/update GitHub issues for detected vulnerabilities.

Error: Resource not accessible by integration

Solution

Added issues: write permission to the workflow permissions block. This allows the workflow to create and update issues to notify about security vulnerabilities.

Change

permissions:
  contents: read
+ issues: write
  packages: write
  security-events: write
  id-token: write

Testing

After this PR merges, the workflow should be able to successfully create/update issues when vulnerabilities are detected.

This fixes the 403 error when the workflow tries to create/update
GitHub issues for detected vulnerabilities.
@kusold kusold merged commit 442d44e into main Feb 1, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants