[rkhwaja]

Potential fix for https://github.com/rkhwaja/wccls/security/code-scanning/1

Add an explicit permissions block in .github/workflows/audit.yml at the workflow root (after on: section, before jobs:) so it applies to all jobs unless overridden. For this workflow, the best minimal permission is:

• contents: read

This preserves current functionality (actions/checkout and read-only audit operations) while ensuring GITHUB_TOKEN is not over-privileged if repo/org defaults are broader.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.19%. Comparing base (8e2e051) to head (dc7db0f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #75   +/-   ##
=======================================
  Coverage   69.19%   69.19%           
=======================================
  Files           4        4           
  Lines         198      198           
=======================================
  Hits          137      137           
  Misses         61       61           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.