Skip to content

fix(ci): restrict GITHUB_TOKEN permissions in mutation workflow - #453

Merged
samtrion merged 1 commit into
mainfrom
fix/workflow-permissions
Nov 3, 2026
Merged

samtrion merged 1 commit into
mainfrom
fix/workflow-permissions

Conversation

@samtrion

@samtrion samtrion commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Adds an explicit top-level permissions: block to the workflow(s) so the GITHUB_TOKEN is least-privilege instead of inheriting the repo/org default.

Resolves code scanning alert actions/missing-workflow-permissions.

Permissions match what the called reusable workflow in dailydevops/pipelines declares (actions: read, contents: read, pull-requests: write, security-events: write).

@codecov

codecov Bot commented Nov 3, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.15%. Comparing base (c82fe7b) to head (d85e4a7).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #453   +/-   ##
=======================================
  Coverage   93.15%   93.15%           
=======================================
  Files          15       15           
  Lines         336      336           
  Branches       99       99           
=======================================
  Hits          313      313           
  Misses         12       12           
  Partials       11       11           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@samtrion
samtrion merged commit 38a6c14 into main Nov 3, 2026
12 checks passed
@samtrion
samtrion deleted the fix/workflow-permissions branch November 3, 2026 18:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant