Leahnaya/mastodon
1
0
Fork 0
mirror of https://github.com/mastodon/mastodon.git synced 2026-09-13 14:55:28 -05:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Restrict GITHUB_TOKEN permissions to contents: read

Browse Source 
The workflow only reads the repository to lint and bundle the OpenAPI
specification. Following the principle of least privilege also silences
the CodeQL missing-workflow-permissions advisory raised on the initial
revision of this PR.
This commit is contained in:
fusagiko / takayamaki
2026-05-10 02:45:54 +00:00
parent 80dccba26c
commit 997f57850c
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/openapi.yml vendored
View File

@@ -1,4 +1,8 @@
name: OpenAPI
permissions:
contents: read
on:
merge_group:
push: