From a0772eac4fd217643fa36cdba28437693154ed42 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 14 Mar 2026 16:09:01 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20=E6=B7=BB=E5=8A=A0=20permissions=20?=
 =?UTF-8?q?=E5=A3=B0=E6=98=8E=E4=BF=AE=E5=A4=8D=20CodeQL=20=E5=AE=89?=
 =?UTF-8?q?=E5=85=A8=E5=91=8A=E8=AD=A6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
---
 .github/workflows/push-broadcast-feishu.yml | 1 +
 .github/workflows/syslog-pipeline.yml       | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/push-broadcast-feishu.yml b/.github/workflows/push-broadcast-feishu.yml
index 98ed9d20..49a83f50 100644
--- a/.github/workflows/push-broadcast-feishu.yml
+++ b/.github/workflows/push-broadcast-feishu.yml
@@ -38,6 +38,7 @@ jobs:
   push-to-feishu:
     name: 📢 推送广播到飞书聊天
     runs-on: ubuntu-latest
+    permissions: {}
 
     steps:
       - name: 📢 推送广播消息卡片
diff --git a/.github/workflows/syslog-pipeline.yml b/.github/workflows/syslog-pipeline.yml
index f9771437..0c6410c0 100644
--- a/.github/workflows/syslog-pipeline.yml
+++ b/.github/workflows/syslog-pipeline.yml
@@ -170,6 +170,7 @@ jobs:
     name: 📢 Pipeline C · 飞书广播推送
     runs-on: ubuntu-latest
     needs: [pipeline-a-syslog, pipeline-b-persona]
+    permissions: {}
     if: >-
       needs.pipeline-b-persona.outputs.broadcast_title != '' &&
       (needs.pipeline-a-syslog.outputs.chat_id != '' || needs.pipeline-a-syslog.outputs.sender_open_id != '')