fix(ci): add missing workflow permissions to resolve security alerts (#646)

Co-authored-by: Claude <noreply@anthropic.com>
2025-08-08 16:12:57 +08:00
parent 7697b6fb47
commit a21e41b89d
6 changed files with 20 additions and 0 deletions
--- a/.github/workflows/ci@main.yml
+++ b/.github/workflows/ci@main.yml
@ -12,6 +12,10 @@ on:
      - 'rush.json'
  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:
+
+permissions:
+  contents: read
+
 jobs:
  build:
    strategy: