ci: restrict workflow token permissions#16

Open

mturac wants to merge 1 commit into

twilic:mainfrom

mturac:fix/issue-15-ci-token-permissions

mturac commented May 15, 2026

Summary

Declare workflow-level GITHUB_TOKEN permissions for CI.
Limit CI to read-only repository contents access.

Related Issue

Closes #15

Type of Change

Testing

ruby -e 'require "yaml"; YAML.load_file(".github/workflows/ci.yml"); puts "ci yaml ok"'\n- [x] git show --check --stat --oneline HEAD\n\n## Checklist\n- [ ] Tests added or updated (optional)\n- [ ] Documentation updated (if applicable)\n- [x] No breaking changes introduced


          ci: restrict workflow token permissions

a9a5b3f

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet