Skip to content

Commit 3b27e8d

Browse files
committed
fix: add explicit permissions to workflow
Add `permissions: contents: read` to module-checks-dev-requirements-change.yml to restrict GITHUB_TOKEN scope following principle of least privilege. Resolves CodeQL alerts #9 and #11 (actions/missing-workflow-permissions).
1 parent 667435a commit 3b27e8d

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.github/workflows/module-checks-dev-requirements-change.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,9 @@ on:
1515
paths:
1616
- "requirements-dev.txt"
1717

18+
permissions:
19+
contents: read
20+
1821
jobs:
1922
get-modules:
2023
name: Get Modules

0 commit comments

Comments
 (0)