From 2fa74ae4cd73196d9b4ed3d0335723db29ba6d32 Mon Sep 17 00:00:00 2001 From: devld Date: Sun, 12 Apr 2026 10:58:41 +0800 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 79: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/release.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8cb2f52..416e20f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,6 +10,10 @@ on: tags: - v* +permissions: + contents: write + actions: write + jobs: build: name: Build From f4f1e326c8a7aee9b5adf619a578b22c1bf04299 Mon Sep 17 00:00:00 2001 From: devld Date: Sun, 12 Apr 2026 10:59:11 +0800 Subject: [PATCH 2/2] Potential fix for code scanning alert no. 80: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/docker-image.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 0b12de8..2db7db7 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -7,6 +7,9 @@ on: description: "Already created tag" required: true +permissions: + contents: read + jobs: buildx: runs-on: ubuntu-latest