From f0190a0f9bd961d098c9acc7b81992a734a77c7a Mon Sep 17 00:00:00 2001 From: tobitege <10787084+tobitege@users.noreply.github.com> Date: Sat, 20 Dec 2025 05:19:37 +0100 Subject: [PATCH] Potential fix for code scanning alert no. 3: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/release.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f904b0c..19e435a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,6 +19,8 @@ on: jobs: validate: runs-on: ubuntu-latest + permissions: + contents: read outputs: version: ${{ steps.validate.outputs.version }} tag: ${{ steps.validate.outputs.tag }} @@ -38,6 +40,8 @@ jobs: build-desktop: needs: validate runs-on: windows-latest + permissions: + contents: read steps: - uses: actions/checkout@v4