Skip to content

Add explicit permissions to CI workflow#19

Merged
alDuncanson merged 2 commits intomainfrom
copilot/apply-autofixes-627
Jan 19, 2026
Merged

Add explicit permissions to CI workflow#19
alDuncanson merged 2 commits intomainfrom
copilot/apply-autofixes-627

Conversation

Copy link
Contributor

Copilot AI commented Jan 19, 2026

Potential fix for alerts

The CI workflow was missing explicit permission declarations, defaulting to broader access than necessary.

Changes:

  • Added permissions: contents: read to .github/workflows/ci.yml
  • Restricts workflow to read-only repository access following principle of least privilege
on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

permissions:
  contents: read

jobs:
  check:
    name: Check

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Co-authored-by: alDuncanson <25286675+alDuncanson@users.noreply.github.com>
Copilot AI changed the title [WIP] Apply code changes to index.js file Add explicit permissions to CI workflow Jan 19, 2026
Copilot AI requested a review from alDuncanson January 19, 2026 01:29
Copy link
Owner

@alDuncanson alDuncanson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

☕️

@alDuncanson alDuncanson marked this pull request as ready for review January 19, 2026 01:45
@alDuncanson alDuncanson merged commit 7725565 into main Jan 19, 2026
4 checks passed
@alDuncanson alDuncanson deleted the copilot/apply-autofixes-627 branch January 19, 2026 01:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants