From 1f3ba13a632a751cc3217cbe02d8aa2190df6b41 Mon Sep 17 00:00:00 2001
From: Brad Linden <46733234+brad-linden@users.noreply.github.com>
Date: Mon, 28 Apr 2025 10:51:47 -0700
Subject: Attempt to fix qatest.yaml CodeQL issues (#3987)

---
 .github/workflows/qatest.yaml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

(limited to '.github/workflows/qatest.yaml')

diff --git a/.github/workflows/qatest.yaml b/.github/workflows/qatest.yaml
index 7f3a5242e9..4892cfaae3 100644
--- a/.github/workflows/qatest.yaml
+++ b/.github/workflows/qatest.yaml
@@ -1,4 +1,7 @@
 name: Run QA Test # Runs automated tests on a self-hosted QA machine
+permissions:
+  contents: read
+  #pull-requests: write # maybe need to re-add this later
 
 on:
   workflow_run:
@@ -15,11 +18,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Debug Workflow Variables
+        env:
+          HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
+          HEAD_COMMIT_MSG: ${{ github.event.workflow_run.head_commit.message }}
         run: |
           echo "Workflow Conclusion: ${{ github.event.workflow_run.conclusion }}"
-          echo "Workflow Head Branch: ${{ github.event.workflow_run.head_branch }}"
+          echo "Workflow Head Branch: $HEAD_BRANCH"
           echo "Workflow Run ID: ${{ github.event.workflow_run.id }}"
-          echo "Head Commit Message: ${{ github.event.workflow_run.head_commit.message }}"
+          echo "Head Commit Message: $HEAD_COMMIT_MSG"
           echo "GitHub Ref: ${{ github.ref }}"
           echo "GitHub Ref Name: ${{ github.ref_name }}"
           echo "GitHub Event Name: ${{ github.event_name }}"
-- 
cgit v1.3