Merge pull request #2485 from step-security/issue2483-2

Add additional prms for scorecard template for private repos(int -> main)
step-security · Sep 17, 2024 · da66ed5 · da66ed5
2 parents 8a372e9 + a294ca7
commit da66ed5
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/testfiles/addworkflow/expected-scorecards.yml b/testfiles/addworkflow/expected-scorecards.yml
@@ -28,6 +28,11 @@ jobs:
       id-token: write
       contents: read
       actions: read
+      # To allow GraphQL ListCommits to work
+      issues: read
+      pull-requests: read
+      # To detect SAST tools
+      checks: read
 
     steps:
       - name: "Checkout code"

diff --git a/workflow-templates/scorecards.yml b/workflow-templates/scorecards.yml
@@ -28,6 +28,11 @@ jobs:
       id-token: write
       contents: read
       actions: read
+      # To allow GraphQL ListCommits to work
+      issues: read
+      pull-requests: read
+      # To detect SAST tools
+      checks: read
 
     steps:
       - name: "Checkout code"