chore(actions): set sbom-action to 0.17.0 and add permission

ydataai · Jul 17, 2024 · 34c40f8 · 34c40f8
1 parent d5f6b9a
commit 34c40f8
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml
@@ -18,6 +18,7 @@ env:
 
 
 permissions:
+ actions: read
  id-token: write
  contents: read
  packages: read
@@ -71,7 +72,7 @@ jobs:
  - uses: actions/checkout@v4
 
  - name: Create SBOM
- uses: anchore/sbom-action@v0
+ uses: anchore/sbom-action@v0.17.0
  with:
  upload-artifact-retention: 1
  format: cyclonedx-json