Skip to content

Conversation

@e271828-
Copy link
Contributor

@e271828- e271828- commented Dec 1, 2025

  • Set default GITHUB_TOKEN scope to contents: read in .github/workflows/ tests.yaml and added job-level permissions to limit privileges: build now only has contents + actions: write for cache save, performance only contents/actions: read/issues: write for PR comments, test only contents: read, create-an-issue only contents/issues: write, release only contents: read.
  • Corrected the scheduled issue-creation guard to github.event_name == 'schedule' so it can’t accidentally run outside the intended trigger.
  • Actions remain commit-pinned; no unpinned third-party actions found.

  - Set default GITHUB_TOKEN scope to contents: read in .github/workflows/
    tests.yaml and added job-level permissions to limit privileges: build
    now only has contents + actions: write for cache save, performance only
    contents/actions: read/issues: write for PR comments, test only contents:
    read, create-an-issue only contents/issues: write, release only contents:
    read.
  - Corrected the scheduled issue-creation guard to github.event_name ==
    'schedule' so it can’t accidentally run outside the intended trigger.
  - Actions remain commit-pinned; no unpinned third-party actions found.
@e271828- e271828- requested a review from CAMOBAP December 1, 2025 15:01
@e271828- e271828- merged commit 7c8bf11 into master Dec 1, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants