Skip to content

CI: add least-privilege permissions to GitHub Actions workflows - #152

Merged
peter-matkovski merged 2 commits into
mainfrom
ci/workflow-least-privilege-permissions
Aug 24, 2026
Merged

CI: add least-privilege permissions to GitHub Actions workflows#152
peter-matkovski merged 2 commits into
mainfrom
ci/workflow-least-privilege-permissions

Conversation

@peter-matkovski

Copy link
Copy Markdown
Contributor

Summary

  • Add explicit least-privilege permissions blocks to workflow files flagged by CodeQL.
  • Scopes derived from workflow operations (build, artifacts, Danger, release git push).
  • Resolves 4 open actions/missing-workflow-permissions alerts.

Linear

Test plan

  • CI green
  • Code scanning alerts close after merge

@peter-matkovski
peter-matkovski force-pushed the ci/workflow-least-privilege-permissions branch from cce1f0b to eee3090 Compare August 24, 2026 14:59
@peter-matkovski
peter-matkovski merged commit b451c67 into main Aug 24, 2026
8 checks passed
@peter-matkovski
peter-matkovski deleted the ci/workflow-least-privilege-permissions branch August 24, 2026 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant