- adds permissions to SQ workflow

microsoft · Jan 22, 2024 · 3bcc6c1 · 3bcc6c1
1 parent dcaf5e5
commit 3bcc6c1
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
@@ -9,6 +9,10 @@ on:
     types: [opened, synchronize, reopened]
     paths-ignore: [".vscode/**"]
 
+permissions:
+  contents: read
+  pull-requests: read
+
 env:
   SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}