From 949e4e4fa0b813b094f5c1744368f5c15e216426 Mon Sep 17 00:00:00 2001 From: Collin Date: Thu, 26 Jun 2025 22:24:51 -0500 Subject: [PATCH] Update build-xserver.yml to have correct permissions to resolve CodeQL alert https://github.com/HaplessIdiot/xserver/security/code-scanning/16 Adds permissions to build in read only to support ubuntu package standards. --- .github/workflows/build-xserver.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/build-xserver.yml b/.github/workflows/build-xserver.yml index 417db1bfd..d86ebb379 100644 --- a/.github/workflows/build-xserver.yml +++ b/.github/workflows/build-xserver.yml @@ -1,5 +1,8 @@ name: Build X servers +permissions: + contents: read + env: MESON_BUILDDIR: "build" X11_PREFIX: /home/runner/x11