chore(actions): set sbom-action to 0.17.0 and add permission

ydataai · Jul 17, 2024 · dede1a6 · dede1a6
1 parent d5f6b9a
commit dede1a6
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/prereleased.yaml b/.github/workflows/prereleased.yaml
@@ -25,6 +25,7 @@ env:
 
 
 permissions:
+  actions: read
   id-token: write
   contents: write
   packages: read
@@ -177,7 +178,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Create SBOM
-      uses: anchore/sbom-action@v0
+      uses: anchore/sbom-action@v0.17.0
       with:
         upload-artifact-retention: 1
         format: cyclonedx-json

diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml
@@ -18,6 +18,7 @@ env:
 
 
 permissions:
+  actions: read
   id-token: write
   contents: read
   packages: read
@@ -71,7 +72,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Create SBOM
-      uses: anchore/sbom-action@v0
+      uses: anchore/sbom-action@v0.17.0
       with:
         upload-artifact-retention: 1
         format: cyclonedx-json