fix: harden workflow permissions with deny-all top-level and least-privilege job scopes (#482)

This commit is contained in:
Copilot
2026-03-06 02:44:56 +02:00
committed by GitHub
parent 455267f892
commit ae4ad9ec80
12 changed files with 32 additions and 35 deletions

View File

@@ -5,8 +5,7 @@ on:
schedule:
- cron: '3 2 1 * *'
permissions:
contents: read
permissions: {}
jobs:
build: