bingshuo
/
zhizhi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: add explicit permissions blocks to workflows (CodeQL) 

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot] 2026-03-15 12:43:18 +00:00
parent ef9812273f
commit bff9144e9a
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/sandbox-deploy.yml vendored
View File

@ -8,6 +8,9 @@ on:
branches: branches:
- 'dev/DEV-*/**' - 'dev/DEV-*/**'
permissions:
contents: write
jobs: jobs:
# ===== Job 1: 解析 + 校验 ===== # ===== Job 1: 解析 + 校验 =====
parse-and-validate: parse-and-validate:

3
.github/workflows/sync-deploy-to-notion.yml vendored
View File

@ -8,6 +8,9 @@ on:
- cron: '0 4,14 * * *' - cron: '0 4,14 * * *'
workflow_dispatch: workflow_dispatch:
permissions:
contents: read
jobs: jobs:
sync: sync:
runs-on: ubuntu-latest runs-on: ubuntu-latest