From c8f66220a0fcf8b12b12b1aa3a4f21bf766edbe2 Mon Sep 17 00:00:00 2001
From: "Stephen Lewis (Burrows)" <stephenrlewis@google.com>
Date: Fri, 22 Mar 2024 13:00:40 -0700
Subject: [PATCH] Added permissions: read-all to codeql action (#10264)

---
 .github/workflows/codeql.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 86b7a12ffe9e..80b66c9dc520 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,4 +1,5 @@
 name: "CodeQL"
+permissions: read-all
 
 on:
   push: