gitea-admin/gh-christianlouis-docuelevate
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: add workflow-level permissions for least privilege

Browse Source 
Add top-level `permissions: contents: read` to the tests workflow,
addressing CodeQL alerts about missing GITHUB_TOKEN permissions.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-02-12 03:09:06 +00:00
parent d025923ef5
commit e89faeccae
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/tests.yaml
+3
View File
@@ -2,6 +2,9 @@ name: Run Tests & Linting
on: [push, pull_request]
permissions:
contents: read
jobs:
# ── Tests ──────────────────────────────────────────────────────────────
test: