CodeCargo: Add code-cargo/cargowall-action@v1.2.0 to workflows

[matthewdevenny]

Add code-cargo/cargowall-action

Adds code-cargo/cargowall-action@v1.2.0 as the first step in each workflow job with the required permissions.

SHA-pinned to fc9644606d84536b4e59a30ad2802904f7b4ff22 (v1.2.0)

Modified workflows

• .github/workflows/publish.yml
• .github/workflows/build.yml

Permissions added per job

permissions:
  contents: read
  actions: read
  id-token: write

---

Generated by CodeCargo

[Copilot]

Pull request overview

Adds the CodeCargo “CargoWall” GitHub Action as the first step in each workflow job, along with explicitly-scoped job permissions to support it. This integrates an additional security/guard step into the repo’s CI (build) and release (publish) workflows.

Changes:

• Add code-cargo/cargowall-action@v1.2.0 (SHA-pinned) as the first step in each workflow job.
• Add per-job permissions (contents: read, actions: read, id-token: write) to both workflows.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/publish.yml	Adds CargoWall step and job-level permissions to the NuGet publish workflow.
.github/workflows/build.yml	Adds CargoWall step and job-level permissions to the main build/test workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.