chore(ci): tighten permissions for AI workflows (#22471)

2026-09-24 15:04:27 +08:00 · 2026-03-10 16:43:36 +05:00
parent 3167908358
commit a21f00d250
4 changed files with 12 additions and 4 deletions
@@ -31,6 +31,9 @@ on:
        default: ""
        type: string

+permissions:
+  contents: read
+
 jobs:
  code-review:
    name: AI Code Review
@@ -51,7 +54,6 @@ jobs:
    permissions:
      contents: read
      pull-requests: write
-      actions: write

    steps:
      - name: Check if secrets are available