Skip to content

Commit 3f2a030

Browse files
ci(actions): set explicit token permissions (#4114)
Add minimal GITHUB_TOKEN permissions to electron-rebuild workflow to enforce least privilege and satisfy CodeQL alert [#14](https://github.com/MagicMirrorOrg/MagicMirror/security/code-scanning/14).
1 parent de3f57f commit 3f2a030

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.github/workflows/electron-rebuild.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: "Electron Rebuild Testing"
22

3+
permissions:
4+
contents: read
5+
36
on: [pull_request]
47

58
jobs:

0 commit comments

Comments
 (0)