Marc Schier 30495fb6f0 [security] buildandtest.yml: add workflow-scoped permissions: contents: read ...

Add an explicit top-level "permissions:" block. Without it the workflow
inherited the repository's default GITHUB_TOKEN scopes — typically
contents: write, packages: write, etc. on push events — none of which
a build-and-test workflow needs. Least-privilege per SecCab-LeastPrivilege.

Block placed between "on:" and "concurrency:" so it scopes the whole
workflow (no individual job needs an override). Mirrors the scope used
by the new .github/workflows/stress-test.yml. No CI semantics change —
all jobs still run.

2026-06-11 09:53:59 +02:00

..

agents

dotnet format sweep (whitespace, IDE, RCS) + code-style enforcer agent fix (#3865)

2026-06-10 08:35:44 +02:00

ISSUE_TEMPLATE

Update README.md and templates (#1749)

2022-03-29 14:23:55 +02:00

workflows

[security] buildandtest.yml: add workflow-scoped permissions: contents: read

2026-06-11 09:53:59 +02:00

copilot-instructions.md

Part 9 Alarms & Conditions: complete server + client implementation (#3805)

2026-05-29 23:24:53 +02:00

dependabot.yml

Update docs, test and dependabot/codecoverage scripts (#2041)

2023-01-10 06:03:18 +01:00

pull_request_template.md

Part 9 Alarms & Conditions: complete server + client implementation (#3805)

2026-05-29 23:24:53 +02:00