mirror of
https://github.com/MichMich/MagicMirror.git
synced 2026-04-22 05:49:32 +00:00
ci(actions): set explicit token permissions (#4114)
Add minimal GITHUB_TOKEN permissions to electron-rebuild workflow to enforce least privilege and satisfy CodeQL alert [#14](https://github.com/MagicMirrorOrg/MagicMirror/security/code-scanning/14).
This commit is contained in:
committed by
GitHub
parent
de3f57f8af
commit
3f2a0302eb
3
.github/workflows/electron-rebuild.yaml
vendored
3
.github/workflows/electron-rebuild.yaml
vendored
@@ -1,5 +1,8 @@
|
||||
name: "Electron Rebuild Testing"
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
on: [pull_request]
|
||||
|
||||
jobs:
|
||||
|
||||
Reference in New Issue
Block a user