From 16265a34ca1ffd2ec83c5156a12c88b8775d4cf4 Mon Sep 17 00:00:00 2001 From: Jeffrey Paul Date: Mon, 7 Jul 2025 13:44:46 -0500 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/release-pull-request.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/release-pull-request.yml b/.github/workflows/release-pull-request.yml index 4248162..c037e88 100644 --- a/.github/workflows/release-pull-request.yml +++ b/.github/workflows/release-pull-request.yml @@ -1,5 +1,9 @@ name: Release Pull Request Automation +permissions: + contents: read + pull-requests: write + on: create: jobs: From 16cc7ff129d007f13b2e01953b0daf8de26fb85b Mon Sep 17 00:00:00 2001 From: Jeffrey Paul Date: Mon, 7 Jul 2025 13:45:02 -0500 Subject: [PATCH 2/2] Potential fix for code scanning alert no. 2: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/test.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index a67ab03..9eac457 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -7,6 +7,8 @@ on: push: branches: - develop +permissions: + contents: read jobs: shellcheck: name: Shellcheck