Giorgi / EntityFramework.Exceptions / 38945115182

92%

push

github

Grant the Sonar workflow permissions per job

An approved pull_request_target run builds the fork's code, and the repository's default token can
write. The workflow now grants nothing by default, and only the build job reads code and pull request
information.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013Gb82tStLCTTJHqR5SVfEF

133 of 155 branches covered (85.81%)

Branch coverage included in aggregate %.

204 of 213 relevant lines covered (95.77%)

42.95 hits per line