Skip to content

fix: restrict CI workflow token permissions#48

Merged
thomasjiangcy merged 1 commit intomainfrom
fix/ci-token-permissions
May 9, 2026
Merged

fix: restrict CI workflow token permissions#48
thomasjiangcy merged 1 commit intomainfrom
fix/ci-token-permissions

Conversation

@thomasjiangcy
Copy link
Copy Markdown
Owner

Summary

  • add explicit read-only GITHUB_TOKEN permissions to the CI workflow
  • address CodeQL alert actions/missing-workflow-permissions

Verification

  • ruby -e 'require "yaml"; YAML.load_file(".github/workflows/ci.yml"); puts "yaml ok"'
  • pre-push ran mise exec -- just ci

@thomasjiangcy thomasjiangcy merged commit b7c4aa2 into main May 9, 2026
4 checks passed
@thomasjiangcy thomasjiangcy deleted the fix/ci-token-permissions branch May 9, 2026 09:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant