Skip to content

Commit f71fbae

Browse files
authored
fix: fix for code scanning alert no. 4: Workflow does not contain permissions (#387)
* fix: workflow permissions Signed-off-by: exploreriii <[email protected]> * fix: added explicit read and write permissions to test.yml Signed-off-by: exploreriii <[email protected]> --------- Signed-off-by: exploreriii <[email protected]>
1 parent b4e8017 commit f71fbae

File tree

2 files changed

+6
-0
lines changed

2 files changed

+6
-0
lines changed

.github/workflows/test.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,10 @@ on:
77
workflow_dispatch:
88
pull_request:
99

10+
permissions:
11+
contents: read
12+
actions: write
13+
1014
jobs:
1115
build-and-test:
1216
runs-on: ubuntu-latest

CHANGELOG.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ This changelog is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.
1212
### Changed
1313

1414
### Fixed
15+
- Added explicit read and write permissions to test.yml
1516

1617
## [0.1.6] - 2025-10-21
1718

@@ -60,6 +61,7 @@ This changelog is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.
6061
- Fixed broken documentation links in CONTRIBUTING.md by converting absolute GitHub URLs to relative paths
6162
- Updated all documentation references to use local paths instead of pointing to hiero-sdk project hub
6263

64+
6365
## [0.1.5] - 2025-09-25
6466

6567
### Added

0 commit comments

Comments
 (0)