ivuorinen/base-configs
1
0
Fork 0
mirror of https://github.com/ivuorinen/base-configs.git synced 2026-02-27 18:53:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): replace read-all with specific permissions in workflows

Browse Source 
Replace overly broad `permissions: read-all` with minimal
`contents: read` at workflow level in pr-lint.yml and sync-labels.yml.
Job-level permissions already declare specific needs.
This commit is contained in:
Ismo Vuorinen
2026-02-27 09:02:17 +02:00
parent 98d9f7410d
commit ae49ca90c6
4 changed files with 325 additions and 329 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/pr-lint.yml vendored
View File

@@ -10,7 +10,8 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions: read-all
permissions:
contents: read
env:
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

3
.github/workflows/sync-labels.yml vendored
View File

@@ -20,7 +20,8 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions: read-all
permissions:
contents: read
jobs:
labels: