From 38dd9ce22342038aa0c02ddfe6178a7a8e492471 Mon Sep 17 00:00:00 2001
From: Pim van Nierop <pim@thehyve.nl>
Date: Wed, 15 Oct 2025 11:29:13 +0200
Subject: [PATCH] Fix: snyk scanning actions

---
 .github/workflows/scheduled-snyk-docker.yaml | 1 +
 .github/workflows/scheduled-snyk.yaml        | 4 +++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/scheduled-snyk-docker.yaml b/.github/workflows/scheduled-snyk-docker.yaml
index e2a80181..0794c27c 100644
--- a/.github/workflows/scheduled-snyk-docker.yaml
+++ b/.github/workflows/scheduled-snyk-docker.yaml
@@ -42,6 +42,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      security-events: write
 
     steps:
       - uses: actions/checkout@v5
diff --git a/.github/workflows/scheduled-snyk.yaml b/.github/workflows/scheduled-snyk.yaml
index 152344db..85407149 100644
--- a/.github/workflows/scheduled-snyk.yaml
+++ b/.github/workflows/scheduled-snyk.yaml
@@ -36,7 +36,9 @@ jobs:
   security:
     needs: prepare-matrix
     runs-on: ubuntu-latest
-    permissions: {}
+    permissions:
+      contents: read
+      security-events: write
     strategy:
       matrix:
         module: ${{ fromJson(needs.prepare-matrix.outputs.modules ) }}