From 8bd7b3f1a7b04260727f016acc903603f5a0b1d3 Mon Sep 17 00:00:00 2001
From: Ray <ray@cachekit.io>
Date: Fri, 12 Dec 2025 10:31:05 +1100
Subject: [PATCH] ci: add checks write permission to codeql workflow

---
 .github/workflows/codeql.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 71287d5a..91152bff 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,6 +26,7 @@ permissions:
   contents: read
   security-events: write  # Required for uploading SARIF results
   actions: read           # Required for workflow status
+  checks: write           # Required for creating check runs
 
 concurrency:
   group: codeql-${{ github.workflow }}-${{ github.ref }}