From 4e0b2a6649530689bb8ccdea8c58acbd4920efdf Mon Sep 17 00:00:00 2001
From: Marvin Lindner <marvin.lindner@sap.com>
Date: Fri, 19 Jun 2026 11:44:57 +0200
Subject: [PATCH] add scope

---
 .github/workflows/pr.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index eba36d2d..28c22f2e 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -35,4 +35,9 @@ jobs:
 
   build-and-test:
     uses: cap-java/cds-feature-attachments/.github/workflows/pipeline.yml@main
+    permissions:
+      actions: read
+      contents: read
+      packages: read
+      security-events: write
     secrets: inherit