Skip to content

fix(workflows): add explicit permissions to GitHub Actions workflows - #233

Open
RamanaReddy8801 wants to merge 3 commits into
newrelic:masterfrom
RamanaReddy8801:fix/workflow-permissions-codeql
Open

fix(workflows): add explicit permissions to GitHub Actions workflows#233
RamanaReddy8801 wants to merge 3 commits into
newrelic:masterfrom
RamanaReddy8801:fix/workflow-permissions-codeql

Conversation

@RamanaReddy8801

@RamanaReddy8801 RamanaReddy8801 commented Aug 5, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Add explicit permissions: contents: read to all workflow files missing a permissions block
  • Follows the principle of least privilege for GitHub Actions tokens
  • Resolves CodeQL alert actions/missing-workflow-permissions (NR-560110)

Test plan

  • Verify CI workflows still pass with the new permissions block
  • Confirm CodeQL alert is resolved after merge

@RamanaReddy8801
RamanaReddy8801 requested a review from a team as a code owner August 5, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant