ivuorinen/dotfiles
1
0
Fork 0
mirror of https://github.com/ivuorinen/dotfiles.git synced 2026-02-07 21:50:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): replace broad permissions with specific scopes in workflows

Browse Source 
Replace read-all/write-all with minimum required permission scopes
across all GitHub Actions workflows to follow the principle of least
privilege (SonarCloud rule githubactions:S8234).
This commit is contained in:
Ismo Vuorinen
2026-02-07 13:46:03 +02:00
parent cff3d1dd8a
commit 89aeb29c04
7 changed files with 20 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/semantic-pr.yml vendored
View File

@@ -14,7 +14,8 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions: read-all
permissions:
pull-requests: read
jobs:
semantic-pr: