mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 11:16:47 +00:00
The test and lint workflows set no permissions, so their GITHUB_TOKEN had the repository's default access (CodeQL actions/missing-workflow-permissions). Both only check out and build the code: they now ask for contents: read. .github/workflows/codeql-analysis.yml was disabled on GitHub; code scanning runs through GitHub's default CodeQL setup instead. The file only kept the old analysis category (and its 2023 alerts) around. |
||
|---|---|---|
| .. | ||
| linters | ||
| workflows | ||