Repository navigation

Tighten the permissions of the reusable workflows we export - #324

Merged

azazeal merged 11 commits into

mainfrom

May 20, 2026

Merged

Tighten the permissions of the reusable workflows we export#324
azazeal merged 11 commits into
mainfrom
panos/perms

Commits on May 20, 2026
- editorconfig: respect the user's tab width
  azazeal
  committed
  8a274fe
- gh: pinned explicit minimum permissions on leaf reusable workflows
  azazeal
  committed
  2b5e498
- gh: added explicit permissions to codeql-analysis.yml
  azazeal
  committed
  aba2686
- gh: added explicit permissions to zizmor.yml
  azazeal
  committed
  73b5a4f
- gh: dropped unneeded contents: write permissions from docker-buildx-push
  azazeal
  committed
  4973686
- gh: scoped permissions per job & dropped unused checkout from triage.yml
  azazeal
  committed
  6ec0ba4
- gh: relaxed GITHUB_TOKEN scope for dependabot-auto-merge.yml
  azazeal
  committed
  6348a05
- gh: wired codeql permissions through the call
  azazeal
  committed
  616d135
- gh: documented the zizmor caller-permission contract
  azazeal
  committed
  be573d9
- gh: fixed zizmor perms
  azazeal
  committed
  f47abc3
- gh: more explicit GOPRIVATE
  azazeal
  committed
  d020ab9