From 50a9bc6d743ef36915366a870b4ab11f315f8325 Mon Sep 17 00:00:00 2001 From: Jimisola Laursen Date: Sun, 23 Aug 2026 12:25:04 +0200 Subject: [PATCH] fix(ci): add explicit permissions to lint.yml CodeQL flagged lint.yml (actions/missing-workflow-permissions): no permissions block anywhere in the file, so it runs with whatever the repo's default token permissions are rather than what it actually needs. It only checks out and reads the repo -- contents: read covers everything the job does. Signed-off-by: Jimisola Laursen --- .github/workflows/lint.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index bc952f2..a066eaa 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -3,6 +3,9 @@ on: workflow_dispatch: workflow_call: +permissions: + contents: read + jobs: linting: runs-on: ubuntu-latest