GitHub Actions SARIF upload fails on private repositories

[cmckni3]

Expected Result

I expected SARIF security events to be uploaded

Actual Result

Error during SARIF upload on a private repository with Advanced Security enabled

Error: Resource not accessible by integration - https://docs.github.com/en/rest/actions/workflow-runs?apiVersion=2022-11-28#get-a-workflow-run

---

Not sure on the best way to fix but I tested by adding actions: read to a copy of run-ash-security-scan.yml and added actions: read to the calling workflow.