Hiroshi SHIBATA 2026-03-31 02:41:43 +0000 (Tue, 31 Mar 2026)
New Revision: d47d97c938
https://github.com/ruby/ruby/commit/d47d97c938
Log:
Add top-level permissions to workflows missing them
Restrict the default GITHUB_TOKEN permissions to contents:read
for workflows that had no top-level permissions block, as flagged
by Scorecard's TokenPermissionsID check.
Co-Authored-By: Claude Opus 4.6 (1M context) <
nor...@anthropic.com>
Modified files:
.github/workflows/labeler.yml
.github/workflows/post_push.yml
.github/workflows/pr-playground.yml
.github/workflows/publish.yml
.github/workflows/release.yml
.github/workflows/sync_default_gems.yml
.github/workflows/wsl.yml