Commit d7733e2
Add explicit permissions to GitHub Actions workflows
Add GITHUB_TOKEN permissions blocks to workflows following
security best practices (principle of least privilege):
- ci.yaml: Add 'contents: read' (only needs to checkout code)
- test.yml: Add 'contents: read' (only needs to checkout code)
- sync-wiki.yml: Add 'contents: write' (needs to push to wiki)
Existing workflows already have permissions:
- draft-release.yml: 'contents: write' (creates releases)
- release-electron.yml: 'contents: write' (creates releases)
This addresses GitHub security warnings about workflows
not limiting GITHUB_TOKEN permissions.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>1 parent 46bd93f commit d7733e2
3 files changed
Lines changed: 9 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
8 | 11 | | |
9 | 12 | | |
10 | 13 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
11 | 14 | | |
12 | 15 | | |
13 | 16 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
6 | 6 | | |
7 | 7 | | |
8 | 8 | | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
9 | 12 | | |
10 | 13 | | |
11 | 14 | | |
| |||
0 commit comments