32164578528
94%
2.x: 94%

Ran 18 Aug 2026 05:16PM UTC

Jobs 4

Files 9

Run time 1min

Badge

Embed ▾

Committed 18 Aug 2026 05:14PM UTC coverage: 94.489%. Remained the same

Build # 32164578528

Build Type

push

github

Committed by

jrfnl

Commit Message

GH Actions: set permissions for each workflow/job

> Users frequently over-scope their workflow and job permissions, or set broad workflow-level permissions without realizing that all jobs inherit those permissions.
>
> Furthermore, users often don't realize that the _default_ `GITHUB_TOKEN` permissions can be very broad, meaning that workflows that don't configure any permissions at all can _still_ provide excessive credentials to their individual jobs.
>
> **Remediation**
> In general, permissions should be declared as minimally as possible, and as close to their usage site as possible.
>
> In practice, this means that workflows should almost always set `permissions: {}` at the workflow level to disable all permissions by default, and then set specific job-level permissions as needed.

Refs:
* https://docs.zizmor.sh/audits/#excessive-permissions

**Notes**:
* Includes a few minor tweaks for consistency in the instructions order.
* The permissions added are based on an best effort to discover the ones needed. Some tweaking may still be needed.

Coverage Stats

1749 of 1851 relevant lines covered (94.49%)

138.7 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	php-7.4-phpcs-3.13.6 - 32164578528.1	18 Aug 2026 05:16PM UTC	9	93.8	GitHub Action Run
2	php-5.4-phpcs-3.13.6 - 32164578528.2	18 Aug 2026 05:17PM UTC	9	93.5	GitHub Action Run
3	php-8.5-phpcs-4.x-dev - 32164578528.3	18 Aug 2026 05:16PM UTC	9	93.98	GitHub Action Run
4	php-7.2-phpcs-4.x-dev - 32164578528.4	18 Aug 2026 05:16PM UTC	9	92.83	GitHub Action Run

sirbrillig / phpcs-variable-analysis / 32164578528
94%
2.x: 94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32164578528

sirbrillig / phpcs-variable-analysis / 32164578528 94% 2.x: 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32164578528

sirbrillig / phpcs-variable-analysis / 32164578528
94%
2.x: 94%

README BADGES
x