coder

mirror of https://github.com/coder/coder.git synced 2026-09-22 13:10:21 +08:00

Files

T

Atif Ali 671173b498 ci: harden GitHub workflow permissions to least privilege (#27414 )

## Summary

Hardens GitHub Actions workflow token permissions to address OpenSSF
Scorecard findings.

## Changes

- Default affected workflows to no token permissions (`permissions:
{}`).
- Move required write permissions directly to the jobs that consume
them.
- Document the least-privilege permissions rule in `AGENTS.md`: never
grant write permissions at the workflow top level; scope grants to
`jobs.<id>.permissions`.

## Validation

- `make lint-light` passed locally via pre-commit hooks.

> 🤖 This PR was created with the help of Coder Agents, and needs a human
review. 🧑💻

2026-07-23 13:03:40 +05:00

actions

ci(.github): remove the go-cache action (#27250 )

2026-07-15 18:35:18 +10:00

ISSUE_TEMPLATE

chore: remove needs-triage label from bug template (#22679 )

2026-03-06 10:55:20 +00:00

pr-deployments

chore: update deprecated usage of coder_workspace.owner* fields (#13390 )

2024-05-30 11:31:51 +01:00

scripts

ci: add retry logic for Go module operations (#21609 )