Skip to content

ci: Harden Github workflows - #497

Merged
tleed5 merged 2 commits into
mainfrom
ci/harden-workflows
Oct 19, 2026
Merged

tleed5 merged 2 commits into
mainfrom
ci/harden-workflows

Conversation

@tleed5

@tleed5 tleed5 commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

Description

  • integration-tests.yml:
    • Added the fork guard.
    • Removed the unused statuses/checks: write.
    • Added contents: read at the top.
  • codeql-analysis.yml: added contents: read at the top, plus CodeQL's job permissions (actions: read, contents: read, security-events: write).
  • release-please.yml: added contents: read.

@tleed5
tleed5 merged commit 2f3669d into main Oct 19, 2026
6 checks passed
@tleed5
tleed5 deleted the ci/harden-workflows branch October 19, 2026 02:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants