Commit beedeae
security: add explicit permissions to integration test workflows
Add minimal required permissions to address security alerts:
.github/workflows/workflow-tests.yml:
- contents: read (to read repository content)
- pull-requests: write (updater creates/updates PRs)
- issues: write (PRs are issues under the hood)
.github/workflows/danger-workflow-tests.yml:
- contents: read (to read repository content)
- pull-requests: read (danger reads PR details)
- issues: write (danger posts comments on PRs)
This follows the principle of least privilege by explicitly limiting
GITHUB_TOKEN permissions instead of using the broad default permissions.
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <[email protected]>1 parent 7a392c9 commit beedeae
File tree
2 files changed
+10
-0
lines changed- .github/workflows
2 files changed
+10
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
8 | 13 | | |
9 | 14 | | |
10 | 15 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
7 | 12 | | |
8 | 13 | | |
9 | 14 | | |
| |||
0 commit comments