Merge pull request #773 from flavio/update-cargo-audit-action

test: fix permissions of cargo audit action

Author: flavio

.github/workflows/security-audit-cron.yml

@@ -8,6 +8,10 @@ permissions: read-all
 
 jobs:
   audit:
+    permissions:
+      checks: write # for rustsec/audit-check to create check
+      contents: read # for actions/checkout to fetch code
+      issues: write # for rustsec/audit-check to create issues
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6

.github/workflows/security-audit-reactive.yml

@@ -10,6 +10,10 @@ permissions: read-all
 
 jobs:
   security_audit:
+    permissions:
+      checks: write # for rustsec/audit-check to create check
+      contents: read # for actions/checkout to fetch code
+      issues: write # for rustsec/audit-check to create issues
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6