From 586f3e4e4b07e1f5535a1f0f9b8c817e310a8ae4 Mon Sep 17 00:00:00 2001 From: Rutger van Bergen Date: Tue, 9 Sep 2025 21:48:00 +0200 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 3: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .../azure-static-web-apps-agreeable-mud-0b27ba210.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml b/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml index f10fac1..2063525 100644 --- a/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml +++ b/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml @@ -1,5 +1,9 @@ name: Azure Static Web Apps CI/CD +permissions: + contents: read + pull-requests: write + on: workflow_dispatch: push: From 62a56870d76c3f7af34d7dd8fba6cf46d339bf84 Mon Sep 17 00:00:00 2001 From: Rutger van Bergen Date: Tue, 9 Sep 2025 21:51:12 +0200 Subject: [PATCH 2/2] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/github-pages.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/github-pages.yml b/.github/workflows/github-pages.yml index 8822880..ee4731e 100644 --- a/.github/workflows/github-pages.yml +++ b/.github/workflows/github-pages.yml @@ -8,6 +8,8 @@ on: jobs: deploy-to-github-pages: + permissions: + contents: write runs-on: ubuntu-latest steps: