mirror of
https://github.com/NexusOne23/noid-privacy.git
synced 2026-02-07 12:11:53 +01:00
Fix: Add explicit permissions to workflow (CodeQL security)
This commit is contained in:
parent
ba364813ed
commit
1c9a47ce63
1 changed files with 6 additions and 0 deletions
6
.github/workflows/pester-tests.yml
vendored
6
.github/workflows/pester-tests.yml
vendored
|
|
@ -7,6 +7,12 @@ on:
|
|||
branches: [ main ]
|
||||
workflow_dispatch:
|
||||
|
||||
# Security: Explicit permissions (Principle of Least Privilege)
|
||||
permissions:
|
||||
contents: read # Required for checkout
|
||||
checks: write # Required for publish-unit-test-result-action
|
||||
pull-requests: write # Required for PR comments by test action
|
||||
|
||||
jobs:
|
||||
test:
|
||||
runs-on: windows-latest
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue