build(ci): add permissions

[poolifier.git] / .github / workflows / codeql-analysis.yml

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 719e5743462e9e447bac5e9410443ccb7f2cc031..5e4fb25be9696af10263c3c77676e8a45ae371fb 100644 (file)
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -13,12 +13,12 @@ name: 'CodeQL'
 
 on:
   push:
-    branches:
-      - ${{ github.event.repository.default_branch }}
+    branches: [master]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches:
-      - ${{ github.event.repository.default_branch }}
+    branches: [master]
+  # merge_group:
+  #   branches: [master]
   schedule:
     - cron: '44 9 * * 3'
 
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL