Gagan H R 8171176e31 ci: add top-level permissions to workflow files ...

Add `permissions: contents: read` at the workflow level for
bump-libs.yaml, format.yaml, master.yaml, and release.yaml to follow
the principle of least privilege. Job-level permissions that require
elevated access will override this as expected.

Signed-off-by: Gagan H R <hrgagan4@gmail.com>

2026-03-11 18:05:08 +01:00

..

bump-libs.yaml

ci: add top-level permissions to workflow files

2026-03-11 18:05:08 +01:00

ci.yml

Revert "fix(.github): ghcr.io rate-limit mitigation"

2025-12-12 13:08:39 +01:00

codeql.yaml

chore!: drop gRPC output and server support

2026-02-05 17:21:54 +01:00

codespell.yml

made required changes

2024-09-04 22:00:06 +02:00

engine-version-weakcheck.yaml

fixed the token-permission and pinned-dependencies issue

2024-09-04 22:00:06 +02:00

format.yaml

ci: add top-level permissions to workflow files

2026-03-11 18:05:08 +01:00

insecure-api.yaml

ci(insecure-api): update semgrep docker image

2024-09-09 15:03:24 +02:00

master.yaml

ci: add top-level permissions to workflow files

2026-03-11 18:05:08 +01:00

release.yaml

ci: add top-level permissions to workflow files

2026-03-11 18:05:08 +01:00

reusable_build_dev.yaml

chore!: drop gRPC output and server support

2026-02-05 17:21:54 +01:00

reusable_build_docker.yaml

chore: adds labels to falco-debian, driver-loader and driver-loader-buster

2025-08-11 10:46:35 +02:00

reusable_build_packages.yaml

chore!: drop legacy BPF probe

2026-02-05 13:15:54 +01:00

reusable_fetch_version.yaml

fixed the token-permission and pinned-dependencies issue

2024-09-04 22:00:06 +02:00

reusable_publish_docker.yaml

fix(ci): fixed reusable_build/publish_docker workflows.

2025-01-21 11:37:59 +01:00

reusable_publish_packages.yaml

fix: consolidate RPM signing logic into publish-rpm

2026-01-19 16:36:17 +01:00

reusable_test_packages.yaml

Revert "fix(.github): ghcr.io rate-limit mitigation"

2025-12-12 13:08:39 +01:00

scorecard.yaml

chore(ci): bumped actions/upload-download-artifact.

2025-01-17 10:01:32 +01:00

staticanalysis.yaml

chore!: drop legacy BPF probe

2026-02-05 13:15:54 +01:00