From e67ed2660a89bcb92a15726983b80f110fe91802 Mon Sep 17 00:00:00 2001
From: loks0n <22452787+loks0n@users.noreply.github.com>
Date: Thu, 12 Mar 2026 13:00:44 +0000
Subject: [PATCH] Add actions: read permission for osv-scanner reusable
 workflow

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 859ace8c4f..f99ee24513 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,6 +24,7 @@ jobs:
     name: Checks / Dependencies
     if: github.event_name == 'pull_request'
     permissions:
+      actions: read
       security-events: write
       contents: read
     uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.3"