RomiC / ya-disk / 28535670359

100%

master: 100%

push

github

CodeQL alert fix for v4.x (#684)

Potential fix for [https://github.com/RomiC/ya-disk/security/code-scanning/2](https://github.com/RomiC/ya-disk/security/code-scanning/2)

Add an explicit `permissions` block at the workflow root (top-level, alongside `name` and `on`) so it applies to all jobs unless overridden. For this workflow, the minimal safe baseline is:

- `contents: read` (needed by `actions/checkout`)
- `pull-requests: read` (safe for PR-context metadata access; does not grant write)

This addresses CodeQL’s complaint without changing job logic or execution flow.  
Edit only `.github/workflows/npm-test.yml`, inserting the block after the trigger section (`on`) and before `jobs`.


_Suggested fixes powered by Copilot Autofix. Review carefully before merging._

121 of 121 branches covered (100.0%)

Branch coverage included in aggregate %.

719 of 719 relevant lines covered (100.0%)

11.26 hits per line