Skip to content

Conversation

@mbroshi-stripe
Copy link
Contributor

No description provided.

ramya-stripe and others added 3 commits January 6, 2026 12:53
Fix code scanning alert about unlimited permissions by applying the
principle of least privilege to all workflow jobs. Each job now has
only the permissions it actually needs:
- Build, test, publish, and compat jobs get contents: read
- publish-docs keeps contents: write (needs to push to gh-pages)
- rules workflow gets empty permissions (no repo access needed)

Committed-By-Agent: claude
@mbroshi-stripe mbroshi-stripe requested a review from a team as a code owner January 12, 2026 21:43
@mbroshi-stripe mbroshi-stripe requested review from xavdid-stripe and removed request for a team January 12, 2026 21:43
@mbroshi-stripe mbroshi-stripe merged commit 24efb4a into beta Jan 12, 2026
15 checks passed
@mbroshi-stripe mbroshi-stripe deleted the mbroshi/merge-java-beta branch January 12, 2026 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants