give only the necessary permissions to CodeQL

pionere · Aug 27, 2024 · 1f1b87c · 1f1b87c
1 parent 02bea01
commit 1f1b87c
Showing 1 changed file with 9 additions and 9 deletions.
diff --git a/.github/workflows/code-ql.yml b/.github/workflows/code-ql.yml
@@ -26,11 +26,11 @@ jobs:
       security-events: write
 
       # required to fetch internal or private CodeQL packs
-      packages: read
+      #packages: read
 
       # only required for workflows in private repositories
-      actions: read
-      contents: read
+      #actions: read
+      #contents: read
 
     strategy:
       fail-fast: false
@@ -76,13 +76,13 @@ jobs:
     # to build your code.
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
-    - name: Create Build Environment
+    - name: Create Build Environment
       if: matrix.build-mode == 'manual'
-      run: >
-        sudo apt-get update &&
-        sudo apt install -y cmake gcc-mingw-w64-i686 g++-mingw-w64-i686 pkg-config-mingw-w64-i686 libz-mingw-w64-dev gettext dpkg-dev wget git sudo &&
-        sudo rm /usr/i686-w64-mingw32/lib/libz.dll.a &&
-        sudo Packaging/windows/mingw-prep.sh
+      run: >
+        sudo apt-get update &&
+        sudo apt install -y cmake gcc-mingw-w64-i686 g++-mingw-w64-i686 pkg-config-mingw-w64-i686 libz-mingw-w64-dev gettext dpkg-dev wget git sudo &&
+        sudo rm /usr/i686-w64-mingw32/lib/libz.dll.a &&
+        sudo Packaging/windows/mingw-prep.sh
 
     - name: Build
       if: matrix.build-mode == 'manual'