From 446e2eb930146aa5ec7d1ebff668d00aaa59dcd8 Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 16:08:19 -0400 Subject: [PATCH 1/3] ci: scope down permissions for release.yml --- .github/workflows/release.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6836121..8009c05 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,6 +5,9 @@ on: name: Create Release +permissions: + contents: write + jobs: build: name: Create Release From 05fc203c62fa02922c76921d1d0ade3e0110b5b7 Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 16:08:21 -0400 Subject: [PATCH 2/3] ci: scope down permissions for check.yml --- .github/workflows/check.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index ba48541..3ce9afd 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -6,6 +6,9 @@ on: name: Check +permissions: + contents: read + jobs: check: name: Run Unit Tests From 7cc83dfacf9fa5b4a145568de59039bb29db9ceb Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 16:08:23 -0400 Subject: [PATCH 3/3] ci: scope down permissions for package.yml --- .github/workflows/package.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml index d6868c6..aa57dc7 100644 --- a/.github/workflows/package.yml +++ b/.github/workflows/package.yml @@ -5,6 +5,9 @@ on: name: Package +permissions: + contents: write + jobs: check: name: Package distribution file