Commit 3b27e8d
committed
fix: add explicit permissions to workflow
Add `permissions: contents: read` to module-checks-dev-requirements-change.yml
to restrict GITHUB_TOKEN scope following principle of least privilege.
Resolves CodeQL alerts #9 and #11 (actions/missing-workflow-permissions).1 parent 667435a commit 3b27e8d
1 file changed
Lines changed: 3 additions & 0 deletions
Lines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
18 | 21 | | |
19 | 22 | | |
20 | 23 | | |
| |||
0 commit comments