Bump github/codeql-action from 2.22.12 to 3.22.12 #7
Triggered via pull request
January 7, 2024 02:06
dependabot[bot]
Status
Startup failure
Total duration
–
Artifacts
–
on.pr.yml
on: pull_request
Checks
/
dependency-review
Matrix: Build (Gradle)
Waiting for pending jobs
Matrix: Build (Maven)
Waiting for pending jobs
Matrix: Checks / Analyze
Waiting for pending jobs
Annotations
1 error
|
Invalid workflow file:
.github/workflows/on.pr.yml#L55
The workflow is not valid. .github/workflows/on.pr.yml (Line: 55, Col: 3): Error calling workflow 'sgammon/modern-java-practices/.github/workflows/checks.codeql.yml@6818e2c77d81a4810317c78ed8b0a1164b76c166'. The nested job 'analyze' is requesting 'actions: read, security-events: write', but is only allowed 'actions: none, security-events: none'.
|