feat(permissions): security enchanced

[zMynxx]

After using this actions for a while, my code scanning tool notified me about a security improvement that can be applied here.

So I've decided to perform some trial and error, and suggest the following changes:

• Added permissions block to limit the permissions use by this job. Only context & metadata are required for the secrets scanning.

[agateau-gg]

Hi, thanks for this contribution. Can you share the content of the code scanning report? We don't have access to it because only owners of the project can read them.

I am not sure your changes would fix an issue in your project because the YAML file you changed is used when building the action, in this repository, not when using the action in another repository.

[zMynxx]

Hi, thanks for this contribution. Can you share the content of the code scanning report? We don't have access to it because only owners of the project can read them.

I am not sure your changes would fix an issue in your project because the YAML file you changed is used when building the action, in this repository, not when using the action in another repository.

Hey, you we're indeed correct. I jumped into the conclusion that the README workflow examples are the one in the repo.
Fixed.

Can't see any code scanning set up on the repo or at my fork, if you could point me at the right direction I'll happily do that.

[agateau-gg]

Hi, thanks for this contribution. Can you share the content of the code scanning report? We don't have access to it because only owners of the project can read them.
I am not sure your changes would fix an issue in your project because the YAML file you changed is used when building the action, in this repository, not when using the action in another repository.

Hey, you we're indeed correct. I jumped into the conclusion that the README workflow examples are the one in the repo. Fixed.

Thanks, this looks good.

Can't see any code scanning set up on the repo or at my fork, if you could point me at the right direction I'll happily do that.

I was referring to the description of your pull request. You said:

After using this actions for a while, my code scanning tool notified me about a security improvement that can be applied here.

But the "notified" link does not work for me because it's limited to owners of the zMynx/aws-lambda-calculator repository. I would be interested to have a look at what the tool said there.

[zMynxx]

Hi, thanks for this contribution. Can you share the content of the code scanning report? We don't have access to it because only owners of the project can read them.
I am not sure your changes would fix an issue in your project because the YAML file you changed is used when building the action, in this repository, not when using the action in another repository.

Hey, you we're indeed correct. I jumped into the conclusion that the README workflow examples are the one in the repo. Fixed.

Thanks, this looks good.

Can't see any code scanning set up on the repo or at my fork, if you could point me at the right direction I'll happily do that.

I was referring to the description of your pull request. You said:

After using this actions for a while, my code scanning tool notified me about a security improvement that can be applied here.

But the "notified" link does not work for me because it's limited to owners of the zMynx/aws-lambda-calculator repository. I would be interested to have a look at what the tool said there.

Roger Roger.
couldn't export the code scan report, but here's a few screenshots with the information.

[agateau-gg]

Looks good, thanks!