streamnative / function-mesh

The serverless framework purpose-built for event streaming applications.
https://functionmesh.io/
Apache License 2.0
210 stars 27 forks source link

Add permissions to the specific scan job to try fixing trivy #763

Closed illegalnumbers closed 3 weeks ago

illegalnumbers commented 3 weeks ago

Motivation

The scheduled Trivy job on the master branch is failing, it looks like a permission issue. This PR adds in job specific permissions. Oddly though the global permissions should have worked, I'm making an assumption that the action has an issue or that the permissions are overrided.

Modifications

Add permissions to scheduled Trivy specific job.

Verifying this change

Documentation

Check the box below.

Need to update docs?

CI change.