Use permissions hardening instead of pinning to SHA #466

Activity

1. aaronliu0130

   added

   dependenciesPull requests that update a dependency filePull requests that update a dependency file

   github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

   on Aug 12, 2026
2. cclauss commented on Aug 12, 2026

   

   cclauss

   on Aug 12, 2026

   Last edited by cclauss

   Member

   More actions

   I am happy to review and merge a pull request on excessive permissions.

   I am unconvinced that we should backtrack on SHA pinning GitHub Actions with cooldown periods.
3. PNHD

   added a commit that references this issue on Aug 14, 2026

   chore(actions): enforce minimal workflow permissions

   ...

   This issue will close once commit 3e9c7c2 is merged into the 'develop' branch.

   3e9c7c2
4. cclauss

   closed this as completedin #467on Aug 14, 2026
5. cclauss

   added a commit that references this issue on Aug 14, 2026

   chore(actions): enforce minimal workflow permissions

   ...

   This issue will close once commit d03e546 is merged into the 'develop' branch.

   d03e546