From 2163c275691e4cebe9f0b56bdf657710b11a2f5b Mon Sep 17 00:00:00 2001 From: Johan Broberg Date: Wed, 19 Nov 2025 15:56:52 -0800 Subject: [PATCH] Potential fix for code scanning alert no. 4: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6cf2cc2b..fbb46774 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,5 +1,8 @@ name: CI - Build, Test, and Publish SDKs +permissions: + contents: read + # This workflow builds, tests, and publishes Python SDK packages # - Builds and tests run on all branches (main, release/*) # - Publishing to package repository ONLY happens on release/* branches