fix: remediate axios supply chain compromise and harden CI workflow permissions

2026-04-04 00:05:27 +00:00
parent 34d73ad6ed
commit 2b8ed06c3c
19 changed files with 217 additions and 188 deletions
--- a/.github/workflows/gh_cache_cleanup.yml
+++ b/.github/workflows/gh_cache_cleanup.yml
@@ -7,6 +7,9 @@ on:
        required: true
        type: string

+permissions:
+  contents: read
+
 jobs:
  cleanup:
    runs-on: ubuntu-latest