From b70af4d5320750acda7cffbd75a3390eede600bd Mon Sep 17 00:00:00 2001 From: Lasse Collin Date: Wed, 17 Jun 2026 16:02:45 +0300 Subject: [PATCH] CI: Add 'permissions' to coverity.yml GitHub's actions/checkout@v6 is documented to need 'contents: read' but it works without it too, probably because the repository is public. Reported-by: GitHub user Alb3e3 Fixes: https://github.com/tukaani-project/xz/pull/230 --- .github/workflows/coverity.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml index 579ac559..7e829ab9 100644 --- a/.github/workflows/coverity.yml +++ b/.github/workflows/coverity.yml @@ -8,6 +8,8 @@ on: push: branches: [coverity_scan] +permissions: {} + jobs: coverity: runs-on: ubuntu-latest -- 2.47.3