You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
security: add permissions to GitHub Actions workflows (#634)
* security: add permissions to GitHub Actions workflows
Add explicit `permissions: contents: read` to all workflow files
that were missing a permissions block. This follows the principle of
least privilege and resolves CodeQL alert actions/missing-workflow-permissions.
Resolves: NR-560140
* fix: set contents: write for release workflow
The release workflow uses goreleaser with GITHUB_TOKEN to upload
binaries to GitHub release assets.