chore(ci): least privilege workflow permissions#570

Merged

DerekRoberts merged 10 commits intomainfrom

feature/workflow-permissions-github-123

Mar 3, 2026

Commits on Mar 2, 2026

fix(github-123): enforce least privilege workflow permissions per copilot.md
DerekRoberts
committed
fix(github-123): update workflow permissions to match bcgov/quickstart-openshift example
DerekRoberts
committed
fix(github-123): restore required job-level permissions for workflow correctness
DerekRoberts
committed
fix(github-123): restore correct workflow permissions per quickstart-openshift example
DerekRoberts
committed
fix(github-123): enforce canonical least-privilege job permissions per quickstart-openshift
DerekRoberts
committed
fix(github-123): add top-level permissions blocks to resolve CodeQL workflow alerts
DerekRoberts
committed
fix(github-123): remove duplicate permissions blocks, enforce single top-level and correct job-level permissions
DerekRoberts
committed
fix(github-123): move permissions to correct position, add job-level only where elevation needed
DerekRoberts
committed
fix(github-123): add contents: read to jobs using actions/checkout
DerekRoberts
committed
fix(github-123): add contents: read to reusable workflow caller jobs
DerekRoberts
committed