Skip to content

Commit beedeae

Browse files
vaindclaude
andcommitted
security: add explicit permissions to integration test workflows
Add minimal required permissions to address security alerts: .github/workflows/workflow-tests.yml: - contents: read (to read repository content) - pull-requests: write (updater creates/updates PRs) - issues: write (PRs are issues under the hood) .github/workflows/danger-workflow-tests.yml: - contents: read (to read repository content) - pull-requests: read (danger reads PR details) - issues: write (danger posts comments on PRs) This follows the principle of least privilege by explicitly limiting GITHUB_TOKEN permissions instead of using the broad default permissions. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>
1 parent 7a392c9 commit beedeae

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

.github/workflows/danger-workflow-tests.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,11 @@ on:
55
pull_request:
66
types: [opened, synchronize, reopened, edited, ready_for_review]
77

8+
permissions:
9+
contents: read
10+
pull-requests: read
11+
issues: write
12+
813
jobs:
914
danger:
1015
runs-on: ubuntu-latest

.github/workflows/workflow-tests.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,11 @@ name: Workflow Tests
44
on:
55
push:
66

7+
permissions:
8+
contents: read
9+
pull-requests: write
10+
issues: write
11+
712
jobs:
813
updater-create-pr:
914
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)