Harden `cron-conda` workflow by explicitly scoping `GITHUB_TOKEN` permissions - #327

Draft

JarryShaw with Copilot wants to merge 3 commits into

mainfrom

copilot/fix-code-scanning-alerts

Commits on Aug 13, 2026

Initial plan
Copilot
authored
daa9ae7
Add explicit token permissions to cron workflow

Copilot
and
JarryShaw
authored
e3fdf20
Scope workflow token permissions by job

Copilot
and
JarryShaw
authored
6fa82a7