From a17ba562e6bc3d84d2b1cc47c06cf46f61d8374b Mon Sep 17 00:00:00 2001
From: Syndamia <kamen@syndamia.com>
Date: Tue, 13 Aug 2024 15:45:14 +0300
Subject: fix(cd*): Replaced token with permissions

---
 .github/workflows/cd.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to '.github/workflows/cd.yml')

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 5b981c1..103717d 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -26,6 +26,8 @@ jobs:
     name: Scan production docker container with trivy
     runs-on: ubuntu-latest
     needs: Build-docker-and-push
+    permissions:
+      security-events: write
     steps:
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
@@ -42,7 +44,6 @@ jobs:
           sarif_file: 'trivy-results.sarif'
           sha: ${{ github.sha }}
           ref: ${{ github.ref }}
-          token: ${{ secrets.TOKEN_GITHUB }}
 
   Release:
     name: Make github release
-- 
cgit v1.2.3