From b70d3dd588c8f9d6c9ed0ff111af06b76fa1f6ba Mon Sep 17 00:00:00 2001 From: Christian Cleberg Date: Wed, 15 Jul 2026 12:03:47 -0500 Subject: fix codeql findings --- .github/workflows/ci.yml | 3 +++ .github/workflows/go.yml | 3 +++ .github/workflows/release.yml | 3 +++ 3 files changed, 9 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 82ca511..a6a11dc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -8,6 +8,9 @@ on: branches: - main +permissions: + contents: read + jobs: test: name: Test diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index d01073e..86abc7d 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -6,6 +6,9 @@ on: pull_request: branches: [ "main" ] +permissions: + contents: read + jobs: build: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a936364..7958b45 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,6 +5,9 @@ on: tags: - 'v*' +permissions: + contents: write + jobs: release: runs-on: ubuntu-latest -- cgit v1.2.3