40216587306
100%
master: 100%

Ran 25 Oct 2026 05:29PM UTC

Jobs 1

Files 2

Run time 1min

Badge

Embed ▾

Committed 25 Oct 2026 05:24PM UTC coverage: 100.0%. Remained the same

Build # 40216587306

Build Type

Pull #77

github

Committed by

jrfnl

Commit Message

GH Actions: set permissions for each workflow/job

> Users frequently over-scope their workflow and job permissions, or set broad workflow-level permissions without realizing that all jobs inherit those permissions.
>
> Furthermore, users often don't realize that the _default_ `GITHUB_TOKEN` permissions can be very broad, meaning that workflows that don't configure any permissions at all can _still_ provide excessive credentials to their individual jobs.
>
> **Remediation**
> In general, permissions should be declared as minimally as possible, and as close to their usage site as possible.
>
> In practice, this means that workflows should almost always set `permissions: {}` at the workflow level to disable all permissions by default, and then set specific job-level permissions as needed.

Refs:
* https://docs.zizmor.sh/audits/#excessive-permissions

Pull Request Pull Request #77: GH Actions: set permissions for each workflow/job

Coverage Stats

67 of 67 relevant lines covered (100.0%)

5.25 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	40216587306.1	25 Oct 2026 05:29PM UTC	2	100.0	GitHub Action Run

php-parallel-lint / PHP-Console-Color / 40216587306
100%
master: 100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 40216587306

php-parallel-lint / PHP-Console-Color / 40216587306 100% master: 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 40216587306

php-parallel-lint / PHP-Console-Color / 40216587306
100%
master: 100%

README BADGES
x