d47d97c938 (master): Add top-level permissions to workflows missing them

0 views
Skip to first unread message

Hiroshi SHIBATA

unread,
Mar 30, 2026, 11:46:02 PM (19 hours ago) Mar 30
to ruby...@g.ruby-lang.org
Hiroshi SHIBATA 2026-03-31 02:41:43 +0000 (Tue, 31 Mar 2026)

New Revision: d47d97c938

https://github.com/ruby/ruby/commit/d47d97c938

Log:
Add top-level permissions to workflows missing them

Restrict the default GITHUB_TOKEN permissions to contents:read
for workflows that had no top-level permissions block, as flagged
by Scorecard's TokenPermissionsID check.

Co-Authored-By: Claude Opus 4.6 (1M context) <nor...@anthropic.com>

Modified files:
.github/workflows/labeler.yml
.github/workflows/post_push.yml
.github/workflows/pr-playground.yml
.github/workflows/publish.yml
.github/workflows/release.yml
.github/workflows/sync_default_gems.yml
.github/workflows/wsl.yml
Reply all
Reply to author
Forward
0 new messages