fix: harden workflow permissions with deny-all top-level and least-privilege job scopes (#482)

This commit is contained in:
Copilot
2026-03-06 02:44:56 +02:00
committed by GitHub
parent 455267f892
commit ae4ad9ec80
12 changed files with 32 additions and 35 deletions

View File

@@ -8,10 +8,7 @@ on:
workflow_call:
workflow_dispatch:
permissions:
contents: read
packages: read
statuses: read
permissions: {}
jobs:
stale: