Ismo Vuorinen 9e10b3e2b2 fix(ci): use GITHUB_TOKEN for semantic-release and harden workflow permissions ...

Replace secrets.PAT with secrets.GITHUB_TOKEN in publish.yml so
semantic-release can comment on PRs/issues using the built-in token
scoped by job-level permissions.

Set top-level permissions to empty object across all workflows to
follow the principle of least privilege, relying on job-level
permissions blocks instead.

2026-02-27 22:50:49 +02:00

..

codeql.yml

fix(ci): use GITHUB_TOKEN for semantic-release and harden workflow permissions

2026-02-27 22:50:49 +02:00

pr-lint.yml

fix(ci): use GITHUB_TOKEN for semantic-release and harden workflow permissions

2026-02-27 22:50:49 +02:00

publish.yml

fix(ci): use GITHUB_TOKEN for semantic-release and harden workflow permissions

2026-02-27 22:50:49 +02:00

stale.yml

fix(ci): use GITHUB_TOKEN for semantic-release and harden workflow permissions

2026-02-27 22:50:49 +02:00

sync-labels.yml

fix(ci): use GITHUB_TOKEN for semantic-release and harden workflow permissions

2026-02-27 22:50:49 +02:00