Skip to content

fix CodeQL permissions#1025

Merged
gdams merged 1 commit into
actions:mainfrom
gdams:codeql
Jun 17, 2026
Merged

fix CodeQL permissions#1025
gdams merged 1 commit into
actions:mainfrom
gdams:codeql

Conversation

@gdams

@gdams gdams commented Jun 17, 2026

Copy link
Copy Markdown
Member

Description:
fixes:

The workflow is not valid. .github/workflows/codeql-analysis.yml (Line: 12, Col: 3): Error calling workflow 'actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main'. The nested job 'analyze' is requesting 'contents: read', but is only allowed 'contents: none'.

Related issue:
Add link to the related issue.

Check list:

  • Mark if documentation changes are required.
  • Mark if tests were added or updated to cover the changes.

Copilot AI review requested due to automatic review settings June 17, 2026 14:55
@gdams gdams requested a review from a team as a code owner June 17, 2026 14:55

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes a GitHub Actions validation error when calling the reusable CodeQL workflow by granting the caller job the contents: read permission required by the nested analyze job in the called workflow.

Changes:

  • Add contents: read to the call-codeQL-analysis job permissions to satisfy the reusable workflow’s required permission set.
Show a summary per file
File Description
.github/workflows/codeql-analysis.yml Adds contents: read permission to the CodeQL reusable-workflow caller job to resolve the permission mismatch error.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 1/1 changed files
  • Comments generated: 0

@gdams gdams merged commit bc52a13 into actions:main Jun 17, 2026
326 checks passed
@gdams gdams deleted the codeql branch June 17, 2026 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants