ignoring test vulnerabilities

Author: Raj-StepSecurity

.github/workflows/coverage.yml

@@ -7,16 +7,17 @@ on:
 jobs:
   coverage:
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
+      checks: write
+      
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
-
       - name: Run Jest Coverage Report
         uses: step-security/jest-coverage-report-action@fix_RemoveVuln
-        with: 
+        with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           output: report-markdown  # Generate markdown output without attaching a comment
-
       - name: Output Jest Coverage Result
         run: echo "${{ steps.coverage.outputs.report }}"  # Output the coverage report in markdown format

__tests__/example.test.js

@@ -4,7 +4,7 @@ test('adds 1 + 2 to equal 3', () => {
   });
 
 
-test('adds 1 + 2 to equal 4', () => {
-    expect(2 + 2).toBe(4);
+test('adds 2 + 2 to equal 4', () => {
+    expect(2 + 2).toBe(3);
   });