From 6ef4c1ac9fc537af724d8da4913acc93e6974247 Mon Sep 17 00:00:00 2001 From: Nat Dean-Lewis <94526761+natdeanlewissoftwire@users.noreply.github.com> Date: Tue, 28 Jul 2026 17:34:52 +0100 Subject: [PATCH] Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions' Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/audit_dependencies.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/audit_dependencies.yml b/.github/workflows/audit_dependencies.yml index 9d5234603..799015719 100644 --- a/.github/workflows/audit_dependencies.yml +++ b/.github/workflows/audit_dependencies.yml @@ -11,6 +11,9 @@ on: merge_group: workflow_dispatch: +permissions: + contents: read + defaults: run: shell: bash