Add actions:read permission required by osv-scanner v2

meysholdt · ona-agent · meysholdt · commit 3353eb1593a2 · 2026-03-08T20:11:14.000Z
Co-authored-by: Ona &lt;no-reply@ona.com&gt;
diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
@@ -22,10 +22,9 @@ on:
     branches: [ "main" ]
 
 permissions:
-  # Require writing security events to upload SARIF file to security tab
   security-events: write
-  # Read commit contents
   contents: read
+  actions: read
 
 jobs:
   scan-scheduled:
