fix: remediate axios supply chain compromise and harden CI workflow permissions

2026-04-04 00:05:27 +00:00
parent 34d73ad6ed
commit 2b8ed06c3c
19 changed files with 217 additions and 188 deletions
--- a/.github/workflows/crowdsec-integration.yml
+++ b/.github/workflows/crowdsec-integration.yml
@@ -20,6 +20,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.event.workflow_run.event || github.event_name }}-${{ github.event.workflow_run.head_branch || github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 jobs:
  crowdsec-integration:
    name: CrowdSec Bouncer Integration