chore(ci): Explicitly limit token permissions (#7519)

- Explicitly set permission boundaries for `GITHUB_TOKEN`
- Prevent overly permissive default tokens

Signed-off-by: ❤是纱雾酱哟~ <49941141+Dragon1573@users.noreply.github.com>
This commit is contained in:
❤是纱雾酱哟~
2026-07-19 10:15:27 +00:00
committed by GitHub
parent 50d828d0d7
commit 53a0971826
5 changed files with 14 additions and 0 deletions
@@ -3,6 +3,9 @@ name: Autobuild Check Logic Test
on:
workflow_dispatch:
permissions:
contents: read
jobs:
check_autobuild_logic:
name: Check Autobuild Should Run Logic
+3
View File
@@ -3,6 +3,9 @@ name: Cargo Audit
on:
workflow_dispatch:
permissions:
contents: read
env:
HUSKY: 0
+3
View File
@@ -4,6 +4,9 @@ on:
pull_request:
workflow_dispatch:
permissions:
contents: read
env:
HUSKY: 0
+2
View File
@@ -5,6 +5,8 @@ on:
workflow_dispatch:
env:
HUSKY: 0
permissions:
contents: read
jobs:
clippy:
+3
View File
@@ -7,6 +7,9 @@ name: Check Formatting
on:
pull_request:
permissions:
contents: read
env:
HUSKY: 0