From 928890b0c5aefbbb75984c616c7fa5b2ab42cfea Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aur=C3=A9lien=20Coet?= Date: Wed, 14 Oct 2026 10:29:05 +0200 Subject: [PATCH 1/2] Set contents rights to 'write' in the unified dogfooding workflow --- .github/workflows/unified-dogfooding.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/unified-dogfooding.yml b/.github/workflows/unified-dogfooding.yml index d0164a30b03..6d24d3dc7c5 100644 --- a/.github/workflows/unified-dogfooding.yml +++ b/.github/workflows/unified-dogfooding.yml @@ -14,7 +14,7 @@ jobs: name: Build for Shadow Scan permissions: id-token: write - contents: read + contents: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1 @@ -43,7 +43,7 @@ jobs: name: Run IRIS permissions: id-token: write - contents: read + contents: write steps: - name: Run IRIS Analysis uses: SonarSource/unified-dogfooding-actions/run-iris@v1 From 9898982a42916fce5d6f57f932bec4bc0f01d619 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aur=C3=A9lien=20Coet?= Date: Wed, 14 Oct 2026 10:51:10 +0200 Subject: [PATCH 2/2] Set contents read permission for the run-iris action --- .github/workflows/unified-dogfooding.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/unified-dogfooding.yml b/.github/workflows/unified-dogfooding.yml index 6d24d3dc7c5..28e323e6d36 100644 --- a/.github/workflows/unified-dogfooding.yml +++ b/.github/workflows/unified-dogfooding.yml @@ -43,7 +43,7 @@ jobs: name: Run IRIS permissions: id-token: write - contents: write + contents: read steps: - name: Run IRIS Analysis uses: SonarSource/unified-dogfooding-actions/run-iris@v1