mirror of
https://github.com/ivuorinen/base-configs-stylelint.git
synced 2026-03-02 06:54:29 +00:00
fix(ci): harden workflow permissions and use GITHUB_TOKEN for releases (#109)
Replace overly broad top-level permissions (read-all) with empty defaults and declare minimal job-level permissions. Switch publish workflow from secrets.PAT to secrets.GITHUB_TOKEN so semantic-release can comment on PRs and issues.
This commit is contained in:
2
.github/workflows/pr-lint.yml
vendored
2
.github/workflows/pr-lint.yml
vendored
@@ -12,7 +12,7 @@ concurrency:
|
||||
group: ${{ github.workflow }}-${{ github.ref }}
|
||||
cancel-in-progress: true
|
||||
|
||||
permissions: read-all
|
||||
permissions: {}
|
||||
|
||||
jobs:
|
||||
Linter:
|
||||
|
||||
Reference in New Issue
Block a user