darken b919d8d19b chore: Harden GitHub Actions workflow permissions ...

Add explicit permissions and persist-credentials: false to all workflows.

Without an explicit permissions block, GITHUB_TOKEN inherits the repo default (write-all). These CI workflows only need contents: read. The release workflow already declares contents: write at job level where needed.

persist-credentials: false prevents the token from lingering in .git/config for subsequent steps, reducing attack surface if a third-party action is compromised.

2026-03-28 09:22:01 +01:00

..

actions/common-setup

chore: Update GitHub Actions to Node.js 24-compatible versions

2026-03-12 15:37:07 +00:00

workflows

chore: Harden GitHub Actions workflow permissions

2026-03-28 09:22:01 +01:00

FUNDING.yml

Update FUNDING.yml

2022-07-25 10:22:32 +02:00

release.yml

Update github actions (based on SDMSE) and use pinning

2025-04-11 03:02:23 +02:00