From aebcc7d8c167ed9b10d4152d56e78bc26b9094d8 Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 14:45:16 -0400 Subject: [PATCH 1/2] ci: scope down permissions for go-test.yml --- .github/workflows/go-test.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml index 499dcc7..2ab2e91 100644 --- a/.github/workflows/go-test.yml +++ b/.github/workflows/go-test.yml @@ -6,6 +6,9 @@ on: push: branches: [ main ] +permissions: + contents: read + jobs: test: name: Run Go Tests From f34e4fd533ab9569f9c009274af5857018390717 Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 14:45:18 -0400 Subject: [PATCH 2/2] ci: scope down permissions for release.yaml --- .github/workflows/release.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 29a4f3a..6a90dbf 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -2,6 +2,9 @@ on: release: types: [created] +permissions: + contents: write + jobs: releases-matrix: name: Release Go Binary