Skip to content

Document required workflow permissions in README - #4065

Open
Hashim1999164 wants to merge 1 commit into
github:mainfrom
Hashim1999164:docs/restore-workflow-permissions-1913
Open

Document required workflow permissions in README#4065
Hashim1999164 wants to merge 1 commit into
github:mainfrom
Hashim1999164:docs/restore-workflow-permissions-1913

Conversation

@Hashim1999164

@Hashim1999164 Hashim1999164 commented Jul 31, 2026

Copy link
Copy Markdown

Summary

  • Expands the Workflow Permissions section in the README with the minimum permission block used by the CodeQL starter workflow.
  • Calls out why security-events: write, packages: read, and the private-repo actions/contents reads are needed.
  • Links to the starter workflow so existing advanced-setup users can find this without disabling and re-enabling CodeQL.

Fixes #1913.

Test plan

  • Skim the README Workflow Permissions section for accuracy against the current starter workflow
  • Confirm links resolve

@Hashim1999164
Hashim1999164 requested a review from a team as a code owner July 31, 2026 18:19
Restore a clear permissions example for advanced setup workflows,
including private-repo needs, so existing users can apply the minimum
set without digging through starter templates. Fixes github#1913.
@Hashim1999164
Hashim1999164 force-pushed the docs/restore-workflow-permissions-1913 branch from 76bf022 to adb29f5 Compare July 31, 2026 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Document required workflow permissions (README regression)

1 participant