From 546726dec8a8c684f68fbe1d6496408fe5791b8b Mon Sep 17 00:00:00 2001 From: Adwait Kumar Singh Date: Wed, 27 Aug 2025 13:19:15 -0700 Subject: [PATCH] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/update-gradle-wrapper.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/update-gradle-wrapper.yml b/.github/workflows/update-gradle-wrapper.yml index 075daa3e0..b32d285b1 100644 --- a/.github/workflows/update-gradle-wrapper.yml +++ b/.github/workflows/update-gradle-wrapper.yml @@ -1,3 +1,5 @@ +permissions: + contents: read name: Update Gradle Wrapper # Needed because dependabot doesn't support updating the gradle wrapper # see: https://github.com/dependabot/dependabot-core/issues/2223