Skip to content

Comments

VLN-538: Set explicit permissions for GitHub Actions workflows#17

Merged
picatz merged 1 commit intomainfrom
security-campaign/set-explicit-github-actions-permissions
Oct 27, 2025
Merged

VLN-538: Set explicit permissions for GitHub Actions workflows#17
picatz merged 1 commit intomainfrom
security-campaign/set-explicit-github-actions-permissions

Conversation

@picatz
Copy link
Contributor

@picatz picatz commented Oct 27, 2025

Summary

  • .github/workflows/ci.yml: Added a workflow-level permissions block restricting the GITHUB_TOKEN to read-only repository contents, which is sufficient for checkout and build steps.

This change was made by an automated process to ensure all GitHub Actions workflows have explicitly defined permissions as per best practices.
@picatz picatz requested a review from a team as a code owner October 27, 2025 17:17
@picatz picatz merged commit 168bc50 into main Oct 27, 2025
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants