fix: restrict GitHub Actions workflow token permissions (OSSF least-privilege) (#2662)

mirror of https://github.com/mikefarah/yq.git synced 2026-09-01 14:14:52 +08:00

* Initial plan

* fix: add least-privilege token permissions to GitHub workflows (OSSF)

Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/1b5db5e2-af78-4289-a6e0-2e972fc68ef1

Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com>

This commit is contained in:

Copilot

2026-04-13 19:11:10 +10:00

committed by

GitHub

co-authored by

mikefarah

copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

parent 838c51691c

commit 9a0335abb2

4 changed files with 13 additions and 0 deletions

									
										.github/workflows/codeql.yml
									
		+2
		
												View File
												
				@@ -20,6 +20,8 @@ on:

				  schedule:

				    - cron: '24 3 * * 1'

				permissions: {}

				jobs:

				  analyze:

				    name: Analyze