Bump github/codeql-action from 2.24.6 to 3.24.6 #4
dependabot[bot]on.pr.yml
on: pull_request
Matrix: Build & Test / test
Waiting for pending jobs
Checks
/
Dependency Graph
Checks
/
Validation
Matrix: Checks / Analyze
Waiting for pending jobs
Build & Test
/
Generate latest docs
Build & Test
/
Publish snapshot
Annotations
1 error
|
Invalid workflow file:
.github/workflows/on.pr.yml#L26
The workflow is not valid. .github/workflows/on.pr.yml (Line: 26, Col: 3): Error calling workflow 'sgammon/guava/.github/workflows/dependency-review.yml@c56fe662cd1a4596e6e15d65b9c90e2de7bf7613'. The workflow is requesting 'contents: read', but is only allowed 'contents: none'. .github/workflows/on.pr.yml (Line: 26, Col: 3): Error calling workflow 'sgammon/guava/.github/workflows/dependency-review.yml@c56fe662cd1a4596e6e15d65b9c90e2de7bf7613'. The nested job 'dependency-review' is requesting 'contents: read', but is only allowed 'contents: none'.
|