fix: remediate axios supply chain compromise and harden CI workflow permissions

2026-04-04 00:05:27 +00:00
parent 34d73ad6ed
commit 2b8ed06c3c
19 changed files with 217 additions and 188 deletions
--- a/.github/workflows/auto-label-issues.yml
+++ b/.github/workflows/auto-label-issues.yml
@@ -8,6 +8,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.event.issue.number }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 jobs:
  auto-label:
    runs-on: ubuntu-latest