Skip to content

ci: Harden Github workflows - #770

Merged
tleed5 merged 2 commits into
mainfrom
ci/harden-workflows
Oct 19, 2026
Merged

tleed5 merged 2 commits into
mainfrom
ci/harden-workflows

Conversation

@tleed5

@tleed5 tleed5 commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

Description

  • gotestsum is pinned in build-and-test and integration-test. Those jobs also get contents: read alongside their existing permissions.
  • pr-title-validation.yml: added contents: read at the top and pull-requests: write on the job.
  • release-please.yml and dist.yml: added contents: read.

@github-actions github-actions Bot added the ci label Oct 16, 2026
@tleed5
tleed5 merged commit 3e25c3e into main Oct 19, 2026
4 checks passed
@tleed5
tleed5 deleted the ci/harden-workflows branch October 19, 2026 02:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants