From 404a1efd61f45aad53aa8abc658bb069276da6ff Mon Sep 17 00:00:00 2001 From: Vito Date: Sat, 2 Aug 2025 08:14:03 -0700 Subject: [PATCH] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/release.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a7a1cf7..117b9ef 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,5 +1,8 @@ name: Release +permissions: + contents: read + on: push: tags: @@ -8,6 +11,8 @@ on: jobs: create-release: runs-on: ubuntu-latest + permissions: + contents: write steps: - uses: actions/checkout@v4