ci: move permissions to job level (#541)

open-amt-cloud-toolkit · Jun 3, 2024 · a73486d · a73486d
1 parent 8c03b26
commit a73486d
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
@@ -8,11 +8,12 @@ on:
     branches: [ main ]
 permissions:
   contents: read
-  security-events: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
-
+    permissions:
+      security-events: write
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0