Tighten the permissions of the reusable workflows we export - #324

Merged

azazeal merged 11 commits into

mainfrom

May 20, 2026

Commits on May 20, 2026

editorconfig: respect the user's tab width
azazeal
committed
8a274fe
gh: pinned explicit minimum permissions on leaf reusable workflows
azazeal
committed
2b5e498
gh: added explicit permissions to codeql-analysis.yml
azazeal
committed
aba2686
gh: added explicit permissions to zizmor.yml
azazeal
committed
73b5a4f
gh: dropped unneeded contents: write permissions from docker-buildx-push
azazeal
committed
4973686
gh: scoped permissions per job & dropped unused checkout from triage.yml
azazeal
committed
6ec0ba4
gh: relaxed GITHUB_TOKEN scope for dependabot-auto-merge.yml
azazeal
committed
6348a05
gh: wired codeql permissions through the call
azazeal
committed
616d135
gh: documented the zizmor caller-permission contract
azazeal
committed
be573d9
gh: fixed zizmor perms
azazeal
committed
f47abc3
gh: more explicit GOPRIVATE
azazeal
committed
d020ab9