From 1facc213efabee8ddc9ef736be8b398dde6213de Mon Sep 17 00:00:00 2001
From: Johannes Wienke <jwienke@itemis.com>
Date: Mon, 18 Mar 2024 13:11:54 +0100
Subject: [PATCH] ci: fix permissions for sarif upload

By explicitly stating permissions for the test comments action, we have
dropped default permissions for detekt to upload the sarif file.
---
 .github/workflows/build.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 147b911683..ef9e8c83d4 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -13,10 +13,12 @@ jobs:
 
     runs-on: ubuntu-latest
 
-    # Cf. https://github.com/marketplace/actions/publish-test-results#permissions
     permissions:
+      # Cf. https://github.com/marketplace/actions/publish-test-results#permissions
       checks: write
       pull-requests: write
+      # For detekt
+      security-events: write
 
     steps:
       - uses: actions/checkout@v4