From d9d1ddd203718b9c7577f38737b0444651ec8b94 Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 14:32:27 -0400 Subject: [PATCH 1/2] ci: scope down permissions for webui_tests.yml --- .github/workflows/webui_tests.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/webui_tests.yml b/.github/workflows/webui_tests.yml index dd4402d1..a4a75149 100644 --- a/.github/workflows/webui_tests.yml +++ b/.github/workflows/webui_tests.yml @@ -3,6 +3,9 @@ on: push: pull_request: +permissions: + contents: read + jobs: webui_test: runs-on: ubuntu-latest From 994288b8b315ee3778484ea99d4ce714d083a318 Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 14:32:29 -0400 Subject: [PATCH 2/2] ci: scope down permissions for slash_command_dispatch.yml --- .github/workflows/slash_command_dispatch.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/slash_command_dispatch.yml b/.github/workflows/slash_command_dispatch.yml index 96bcb84a..d9400fff 100644 --- a/.github/workflows/slash_command_dispatch.yml +++ b/.github/workflows/slash_command_dispatch.yml @@ -2,6 +2,10 @@ name: Slash Command Dispatch on: issue_comment: types: [created] +permissions: + contents: read + pull-requests: write + jobs: slashCommandDispatch: runs-on: ubuntu-latest