From 5cd6b907f2d2e67b9673c48c86bb4e6842e6eb8b Mon Sep 17 00:00:00 2001 From: "stepsecurity-app[bot]" <188008098+stepsecurity-app[bot]@users.noreply.github.com> Date: Fri, 6 Jun 2025 18:22:03 +0000 Subject: [PATCH] [StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot --- .github/workflows/check.yml | 3 +++ .github/workflows/release-plz.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index d189b2a..21ff4c5 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -6,6 +6,9 @@ on: merge_group: branches: - main +permissions: + contents: read + jobs: rustfmt: name: rustfmt diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml index b0b1875..7a3500f 100644 --- a/.github/workflows/release-plz.yml +++ b/.github/workflows/release-plz.yml @@ -6,6 +6,9 @@ on: concurrency: group: "${{ github.workflow }}" cancel-in-progress: true +permissions: + contents: read + jobs: release-plz: name: release-plz