ivuorinen/base-configs-stylelint
1
0
Fork 0
mirror of https://github.com/ivuorinen/base-configs-stylelint.git synced 2026-03-02 13:54:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): harden workflow permissions and use GITHUB_TOKEN for releases (#109)

Browse Source 
Replace overly broad top-level permissions (read-all) with empty
defaults and declare minimal job-level permissions. Switch publish
workflow from secrets.PAT to secrets.GITHUB_TOKEN so semantic-release
can comment on PRs and issues.
This commit is contained in:
Ismo Vuorinen
2026-02-28 10:08:15 +02:00
committed by GitHub
parent 49e85b8097
commit 9992182f9e
5 changed files with 8 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/sync-labels.yml vendored
View File

@@ -20,7 +20,7 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions: read-all
permissions: {}
jobs:
labels: