Mohd KaifandCopilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> 893048ef2a Potential fix for code scanning alert no. 34: Workflow does not contain permissions (#641) ...

Adds an explicit top-level `permissions` block to the GitHub Actions CI workflow.

This change sets the `GITHUB_TOKEN` permission scope to the minimum required level (`contents: read`), following the principle of least privilege and addressing the CodeQL alert `actions/missing-workflow-permissions`.

The workflow only requires read access to repository contents for checkout and CI tasks, so no additional permissions are needed.

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

2026-06-16 18:49:51 +05:30

..

benchmark.yml

ci: disable automatic benchmark runs on push — manual only via workflow_dispatch

2026-05-23 00:04:52 +05:30

ci.yml

Potential fix for code scanning alert no. 34: Workflow does not contain permissions (#641)

2026-06-16 18:49:51 +05:30

codeql.yml

fix: address 4 post-review bugs from security-enhancement PR

2026-04-12 14:35:30 +05:30

defender-for-devops.yml

ci(deps): bump actions/setup-dotnet from 4 to 5 (#632)

2026-06-16 16:31:04 +05:30

docs.yml

ci(deps): bump actions/setup-node from 4 to 6 (#569)

2026-05-26 15:10:02 +05:30

release.yml

fix(explorer): resolve blank dashboard UI and ship frontend bundle in wheel (#638)

2026-06-16 14:38:24 +05:30

security-scan.yml

ci(deps): bump actions/github-script from 8 to 9 (#454)

2026-04-13 15:21:15 +05:30

security.yml

fix(security): resolve CodeQL alerts for logging, URL sanitization, and workflow permissions

2026-03-30 19:46:30 +05:30