Skip to content

Limit CI workflow token permissions - #1426

Open
bgentry wants to merge 1 commit into
randur-pgrustfrom
bg/limit-ci-token-permissions
Open

bgentry wants to merge 1 commit into
randur-pgrustfrom
bg/limit-ci-token-permissions

Conversation

@bgentry

@bgentry bgentry commented Oct 4, 2026

Copy link
Copy Markdown
Contributor

Set the CI workflow's default GITHUB_TOKEN scope to contents: read, covering the new pgRust job and the existing benchmark, test, CLI, and verification jobs. The lint job keeps its explicit pull-requests: read permission alongside contents: read.

Addresses code scanning alert #12. Stacked on #1423.

@bgentry
bgentry added this pull request to stack #1428 October 4, 2026 18:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants