mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
The test and lint workflows set no permissions, so their GITHUB_TOKEN had the repository's default access (CodeQL actions/missing-workflow-permissions). Both only check out and build the code: they now ask for contents: read. .github/workflows/codeql-analysis.yml was disabled on GitHub; code scanning runs through GitHub's default CodeQL setup instead. The file only kept the old analysis category (and its 2023 alerts) around. |
||
|---|---|---|
| .. | ||
| linter.yml | ||
| test.yml | ||