Skip to content

ci: restrict workflow tokens to contents: read - #7

Merged
zumbrunn merged 1 commit into
mainfrom
ci/workflow-permissions
Oct 15, 2026
Merged

zumbrunn merged 1 commit into
mainfrom
ci/workflow-permissions

Conversation

@zumbrunn

Copy link
Copy Markdown
Member

Adds an explicit workflow-level permissions: contents: read block, resolving the CodeQL actions/missing-workflow-permissions alert(s). No behavior change: these workflows only need to read the repo.

🤖 Generated with Claude Code

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@zumbrunn
zumbrunn merged commit 9c0d661 into main Oct 15, 2026
4 checks passed
@zumbrunn
zumbrunn deleted the ci/workflow-permissions branch October 15, 2026 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant