Twingate / kubernetes-operator / 16731288192

97%

push

github

chore: Github Action workflow permissions (#737)

Potential fix for
[https://github.com/Twingate/kubernetes-operator/security/code-scanning/9](https://github.com/Twingate/kubernetes-operator/security/code-scanning/9)

To fix the problem, add a `permissions` block to the `release_prod` job
in `.github/workflows/release.yaml`. This block should specify the
minimal permissions required for the job. As a starting point, set
`contents: read`, which allows the job to read repository contents but
not modify them. If the job later requires additional permissions (e.g.,
to create releases), these can be added as needed. The change should be
made directly under the `release_prod` job definition, before the `name`
or `runs-on` keys.

---


_Suggested fixes powered by Copilot Autofix. Review carefully before
merging._

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

199 of 224 branches covered (88.84%)

Branch coverage included in aggregate %.

1221 of 1247 relevant lines covered (97.91%)

0.98 hits per line