From 496f76eb79f4cc6cd2350ac01df984534ddd27bf Mon Sep 17 00:00:00 2001 From: dongjiang Date: Mon, 15 Jun 2026 12:25:22 +0800 Subject: [PATCH] Potential fix for code scanning alert no. 17: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: dongjiang --- .github/workflows/update-contributors.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/update-contributors.yml b/.github/workflows/update-contributors.yml index f7d08e2..a2cb700 100644 --- a/.github/workflows/update-contributors.yml +++ b/.github/workflows/update-contributors.yml @@ -5,6 +5,9 @@ on: - cron: '0 18 * * 0' # Every Monday at 2:00 AM Beijing time (UTC+8) workflow_dispatch: # Manual trigger +permissions: + contents: write + jobs: update: runs-on: ubuntu-latest