fix: remediate axios supply chain compromise and harden CI workflow permissions

2026-04-04 00:05:27 +00:00
parent 34d73ad6ed
commit 2b8ed06c3c
19 changed files with 217 additions and 188 deletions
--- a/.github/workflows/security-pr.yml
+++ b/.github/workflows/security-pr.yml
@@ -22,6 +22,9 @@ concurrency:
  group: security-pr-${{ github.event_name == 'workflow_run' && github.event.workflow_run.event || github.event_name }}-${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_branch || github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 jobs:
  security-scan:
    name: Trivy Binary Scan