shink commented on code in PR #4372:
URL: https://github.com/apache/incubator-inlong/pull/4372#discussion_r892056289


##########
.github/workflows/ci_codeql.yml:
##########
@@ -24,8 +24,6 @@ jobs:
     name: Analyze by CodeQL
     runs-on: ubuntu-latest
     permissions:
-      actions: read
-      contents: read

Review Comment:
   > @shink do you know how to avoid the high severity security vulnerabilities 
temporarily, these vulnerabilities will be fixed in the future. we need to keep 
the workflow runs passed now, and to prevent new vulnerabilities appears.
   
   The default value is false, but it cannot meet your need. I just try it.
   



##########
.github/workflows/ci_codeql.yml:
##########
@@ -24,8 +24,6 @@ jobs:
     name: Analyze by CodeQL
     runs-on: ubuntu-latest
     permissions:
-      actions: read
-      contents: read

Review Comment:
   > @shink do you know how to avoid the high severity security vulnerabilities 
temporarily, these vulnerabilities will be fixed in the future. we need to keep 
the workflow runs passed now, and to prevent new vulnerabilities appears.
   
   @dockerzhang The default value is false, but it cannot meet your need. I 
just try it.
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to