27768297763
76%

Ran 18 Jun 2026 03:09PM UTC

Jobs 1

Files 62

Run time 1min

Badge

Embed ▾

Committed 18 Jun 2026 02:55PM UTC coverage: 76.344% (-0.2%) from 76.578%

Build # 27768297763

Build Type

push

github

Committed by

web-flow

Commit Message

ci: harden GitHub workflows (#625)

## What
<!-- One sentence summary -->
Relates to https://github.com/opendefensecloud/odd-internal/issues/40
and https://github.com/opendefensecloud/odd-internal/issues/43.

## Why
Restrict the permissions of our GitHub workflows to follow security best
practices.

## Testing
none

## Checklist
- [x] ~Tests added/updated~ n/a
- [x] No breaking changes (or upgrade path documented above)
- [x] Readable commit history (squashed and cleaned up as desired)
- [x] AI code review considered and comments resolved


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Enhanced security of continuous integration and deployment pipelines
through improved credential isolation and stricter permission scoping
across automated workflows.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Coverage Stats

3592 of 4705 relevant lines covered (76.34%)

32.1 hits per line

Coverage Regressions

Lines	Coverage	∆	File
11	71.14	-1.08%	pkg/controller/target_controller.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	27768297763.1	18 Jun 2026 03:09PM UTC	62	76.34	GitHub Action Run

opendefensecloud / solution-arsenal / 27768297763
76%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 27768297763

opendefensecloud / solution-arsenal / 27768297763 76%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 27768297763

opendefensecloud / solution-arsenal / 27768297763
76%

README BADGES
x