public_git/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-09-30 03:01:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

ci(windows-installer): add explicit permissions block

Browse Source 
Address CodeQL actions/missing-workflow-permissions finding. Least-
  privilege at workflow level: contents: write is required by
  softprops/action-gh-release to attach the installer .exe to a tag
  release; all other steps are read-only.
This commit is contained in:
maziggy
2026-06-10 12:36:44 +02:00
parent 96a5f953f0
commit ef1c7f578e
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/windows-installer.yml
+8
View File
@@ -16,6 +16,14 @@ on:
- 'v*'
workflow_dispatch:
# Least-privilege per CodeQL actions/missing-workflow-permissions.
# contents: write is required by softprops/action-gh-release to attach
# the .exe to a tag release; the manual-dispatch path doesn't trigger
# that step and could run with read-only, but a single workflow-level
# block keeps the surface auditable in one place.
permissions:
contents: write
jobs:
build:
runs-on: windows-latest