Skip to content

add permissions to GitHub Actions workflows - #245

Open
RamanaReddy8801 wants to merge 2 commits into
newrelic:masterfrom
RamanaReddy8801:add-workflow-permissions
Open

add permissions to GitHub Actions workflows#245
RamanaReddy8801 wants to merge 2 commits into
newrelic:masterfrom
RamanaReddy8801:add-workflow-permissions

Conversation

@RamanaReddy8801

@RamanaReddy8801 RamanaReddy8801 commented Aug 5, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Add explicit permissions: contents: read to all workflow files missing a permissions block
  • Follows the principle of least privilege for GitHub Actions tokens
  • Resolves CodeQL alert actions/missing-workflow-permissions (NR-560128)

Test plan

  • Verify CI workflows still pass with the new permissions block
  • Confirm CodeQL alert is resolved after merge

@RamanaReddy8801
RamanaReddy8801 requested a review from a team as a code owner August 5, 2026 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant