Skip to content

refactor(ci): set permissions#275

Merged
EagleoutIce merged 1 commit into
mainfrom
274-fix-security-vulns
May 2, 2025
Merged

refactor(ci): set permissions#275
EagleoutIce merged 1 commit into
mainfrom
274-fix-security-vulns

Conversation

@EagleoutIce
Copy link
Copy Markdown
Member

No description provided.

@EagleoutIce EagleoutIce linked an issue May 2, 2025 that may be closed by this pull request
@EagleoutIce EagleoutIce requested a review from Copilot May 2, 2025 16:53
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the CI workflows by adding specific permissions settings for each job to improve security and clarity of access levels. Key changes include:

  • Addition of a "permissions" block to the test, release, package, and lint workflows.
  • Differentiation of permission levels across jobs (e.g., read for test and lint jobs, write for release and package jobs).

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
.github/workflows/test.yml Added permissions block with contents: read
.github/workflows/release.yml Added permissions block for test and release jobs
.github/workflows/package.yml Added permissions block including id-token write
.github/workflows/lint.yml Added permissions block with contents: read

@EagleoutIce EagleoutIce merged commit 34bace1 into main May 2, 2025
7 checks passed
@EagleoutIce EagleoutIce deleted the 274-fix-security-vulns branch May 2, 2025 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix security vulns

2 participants