GithubBackup/BackupX
1
0
Fork 0
mirror of https://github.com/Awuqing/BackupX.git synced 2026-08-25 01:59:46 +08:00
Code Issues Packages Projects Releases Wiki Activity

chore(ci): 为工作流声明最小权限 (contents: read)

Browse Source 
修复 CodeQL actions/missing-workflow-permissions 告警：ci.yml 未显式声明
GITHUB_TOKEN 权限，默认可写。构建/测试仅需读取仓库内容，故收敛为 contents: read。
This commit is contained in:
Awuqing
2026-06-01 00:23:23 +08:00
parent 37092f3167
commit 9fb90e8829
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/ci.yml vendored
View File

@@ -6,6 +6,10 @@ on:
pull_request: pull_request:
branches: [main, master] branches: [main, master]
# 最小权限：构建/测试仅需读取仓库内容，显式声明以收敛默认的可写令牌。
permissions:
contents: read
jobs: jobs:
backend: backend:
name: Go Build & Test name: Go Build & Test