Skip to content

fix(ci): permissions & persist-credentials#50

Merged
acidghost merged 1 commit intomainfrom
fix/codeql
Aug 11, 2025
Merged

fix(ci): permissions & persist-credentials#50
acidghost merged 1 commit intomainfrom
fix/codeql

Conversation

@acidghost
Copy link
Copy Markdown
Owner

No description provided.

@acidghost acidghost added the ci label Aug 11, 2025
@acidghost acidghost marked this pull request as ready for review August 11, 2025 06:16
Copilot AI review requested due to automatic review settings August 11, 2025 06:16
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR enhances the security posture of the CI workflow by implementing GitHub Actions security best practices. It restricts workflow permissions to read-only for repository contents and disables credential persistence across all checkout actions.

  • Added read-only content permissions at the workflow level
  • Configured all checkout actions to disable credential persistence for enhanced security

@acidghost acidghost merged commit e0cc237 into main Aug 11, 2025
5 checks passed
@acidghost acidghost deleted the fix/codeql branch August 11, 2025 06:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants