WC3D 4d960c3c8c Potential fix for code scanning alert no. 29: Workflow does not contain permissions (#12326) ...

If a GitHub Actions job or workflow has no explicit permissions set, then the repository permissions are used. Repositories created under an organization inherit the organization's permissions. Organizations or repositories created before February 2023 have default permissions set to read-write. Often, these permissions do not adhere to the principle of least privilege and can be reduced to read-only, leaving write permission only for specific types, such as issues (write) or pull requests (write).

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

2025-07-17 08:54:53 +08:00

..

ISSUE_TEMPLATE

Update bug_report.yaml (#9935)

2024-11-16 16:27:51 +08:00

patches

fix "Add to addresssBook" dropdown menu (#9878)

2024-11-11 08:39:54 +08:00

workflows

Potential fix for code scanning alert no. 29: Workflow does not contain permissions (#12326)

2025-07-17 08:54:53 +08:00

dependabot.yml

Create dependabot.yml (#10593)

2025-01-26 14:18:26 +08:00

FUNDING.yml

Update FUNDING.yml

2021-06-07 12:48:43 +08:00