From 8b776c34d172eaba5787248d5c091f3348ccc2fc Mon Sep 17 00:00:00 2001
From: Ahmad <103906421+ahmadk953@users.noreply.github.com>
Date: Sun, 4 May 2025 15:06:36 -0400
Subject: [PATCH 1/2] Potential fix for code scanning alert no. 13: Workflow
 does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Ahmad <103906421+ahmadk953@users.noreply.github.com>
---
 .github/workflows/npm-build-and-compile.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/npm-build-and-compile.yml b/.github/workflows/npm-build-and-compile.yml
index 51c4c1a..67c665b 100644
--- a/.github/workflows/npm-build-and-compile.yml
+++ b/.github/workflows/npm-build-and-compile.yml
@@ -1,5 +1,8 @@
 name: NodeJS Build and Compile
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: ["main"]

From ac578f5c1f77f5db03aa33792de20f034b9f5d6a Mon Sep 17 00:00:00 2001
From: Ahmad <103906421+ahmadk953@users.noreply.github.com>
Date: Sun, 4 May 2025 15:19:11 -0400
Subject: [PATCH 2/2] ci: update .github/workflows/npm-build-and-compile.yml

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Signed-off-by: Ahmad <103906421+ahmadk953@users.noreply.github.com>
---
 .github/workflows/npm-build-and-compile.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/npm-build-and-compile.yml b/.github/workflows/npm-build-and-compile.yml
index 67c665b..c266195 100644
--- a/.github/workflows/npm-build-and-compile.yml
+++ b/.github/workflows/npm-build-and-compile.yml
@@ -2,7 +2,7 @@ name: NodeJS Build and Compile
 
 permissions:
   contents: read
-
+  actions: write
 on:
   push:
     branches: ["main"]