chore(actions): set sbom-action to 0.17.0 and add permission

ydataai · Jul 17, 2024 · 63e54b8 · 63e54b8
1 parent fa62a74
commit 63e54b8
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/prereleased.yml b/.github/workflows/prereleased.yml
@@ -20,6 +20,7 @@ env:
 
 
 permissions:
+ actions: read
  id-token: write
  contents: write
  packages: write
@@ -224,7 +225,7 @@ jobs:
  - uses: actions/checkout@v4
 
  - name: Create SBOM
- uses: anchore/sbom-action@v0
+ uses: anchore/sbom-action@v0.17.0
  with:
  upload-artifact-retention: 1
  format: cyclonedx-json

diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
@@ -6,8 +6,6 @@ on:
  pull_request:
  branches:
  - master
- types:
- - ready_for_review
 
 
 
@@ -18,6 +16,7 @@ env:
 
 
 permissions:
+ actions: read
  id-token: write
  contents: read
  packages: read
@@ -75,7 +74,7 @@ jobs:
  - uses: actions/checkout@v4
 
  - name: Create SBOM
- uses: anchore/sbom-action@v0
+ uses: anchore/sbom-action@v0.17.0
  with:
  upload-artifact-retention: 1
  format: cyclonedx-json