Grant permission for type resolution Gradle job (#5470)

Broken in #5452
detekt · Oct 24, 2022 · 2932b2a · 2932b2a
1 parent 5565256
commit 2932b2a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/detekt-with-type-resolution.yaml b/.github/workflows/detekt-with-type-resolution.yaml
@@ -46,6 +46,9 @@ jobs:
 
 
   gradle:
+    permissions:
+      contents: read  # for actions/checkout to fetch code
+      security-events: write  # for github/codeql-action/upload-sarif to upload SARIF results
     runs-on: ubuntu-latest
     if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
     steps: