From 52339da0c6fd0567908685bf68e57bf6303fc31f Mon Sep 17 00:00:00 2001
From: "Christian Y. Brenninkmeijer"
 <christian.brenninkmeijer@manchester.ac.uk>
Date: Wed, 1 May 2024 13:18:37 +0100
Subject: [PATCH] add permissions

---
 .github/workflows/codeql-analysis.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index c7837f04b9..22fee4de41 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -46,7 +46,9 @@ env:
 jobs:
   analyze:
     permissions:
+      actions: read
       contents: write
+      security-events: write
     name: Analyze
     runs-on: ubuntu-latest
     timeout-minutes: 15