From 85d6270aba92f57e06941f3632bec9d0e9c10a97 Mon Sep 17 00:00:00 2001 From: Akshay Aggarwal Date: Mon, 16 Feb 2026 13:51:27 +0000 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/pull-request-main.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/pull-request-main.yml b/.github/workflows/pull-request-main.yml index 0665ac03..7a612dff 100644 --- a/.github/workflows/pull-request-main.yml +++ b/.github/workflows/pull-request-main.yml @@ -32,6 +32,8 @@ jobs: ci-lint-misc: runs-on: ubuntu-latest + permissions: + contents: read steps: - name: ci-lint-misc uses: smartcontractkit/.github/actions/ci-lint-misc@01d931b0455a754d12e7143cc54a5a3521a8f6f6 # ci-lint-misc@0.1.4 From 182c2924542091f19182f86c019f83450d111d68 Mon Sep 17 00:00:00 2001 From: Akshay Aggarwal Date: Fri, 20 Feb 2026 18:11:10 +0000 Subject: [PATCH 2/2] copy perms to be same as ci-lint --- .github/workflows/pull-request-main.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/pull-request-main.yml b/.github/workflows/pull-request-main.yml index 7a612dff..a0ec4322 100644 --- a/.github/workflows/pull-request-main.yml +++ b/.github/workflows/pull-request-main.yml @@ -33,7 +33,9 @@ jobs: ci-lint-misc: runs-on: ubuntu-latest permissions: + id-token: write contents: read + actions: read steps: - name: ci-lint-misc uses: smartcontractkit/.github/actions/ci-lint-misc@01d931b0455a754d12e7143cc54a5a3521a8f6f6 # ci-lint-misc@0.1.4