From de335c8b7d8c0f34ea07c02e32b41af25641e4a1 Mon Sep 17 00:00:00 2001 From: Ryan Luu Date: Thu, 8 Jan 2026 00:35:51 -0800 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Ryan Luu --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5d8b9b5..e50aafe 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,5 +1,8 @@ name: CI +permissions: + contents: read + on: pull_request: paths: From 57445fa5f533f2de752222083fa52da328e79336 Mon Sep 17 00:00:00 2001 From: Ryan Luu Date: Thu, 8 Jan 2026 00:37:02 -0800 Subject: [PATCH 2/2] Reorganize permissions section in CI workflow Signed-off-by: Ryan Luu --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e50aafe..88bfda4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,8 +1,5 @@ name: CI -permissions: - contents: read - on: pull_request: paths: @@ -17,6 +14,9 @@ env: OUTPUT_NAME: Purse BUILD_PROJECT: package.project.json +permissions: + contents: read + jobs: build: runs-on: ubuntu-latest