From a0c6848ccfced8a8438558177d448101d4c2e36a Mon Sep 17 00:00:00 2001
From: Alex <93376818+sashashura@users.noreply.github.com>
Date: Tue, 30 Aug 2022 22:07:24 +0100
Subject: [PATCH] Update check.yml

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>
---
 .github/workflows/check.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 794b3874..096c5f35 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -30,6 +30,9 @@ on:
     - flatpak-1.10.x
     - flatpak-1.12.x
 
+permissions:
+  contents: read
+
 jobs:
   check:
     name: Build with gcc and test
@@ -159,6 +162,8 @@ jobs:
         path: test-logs
 
   clang:
+    permissions:
+      security-events: write # for codeql
     name: Build with clang and analyze
     runs-on: ubuntu-18.04
     strategy: