#650 Potential fix for code scanning alert no. 20: Workflow does not contain permissions Pull request opened by javuto Potential fix for https://github.com/jmpsec/osctrl/security/code-scanning/20 To fix the issue, we will add a

permissions

block at the root level of the workflow to define the minimal permissions required for all jobs. Additionally, we will add job-specific

permissions

blocks for jobs that require elevated permissions, such as

create_release

, which needs

contents: write

to create a release. This approach ensures that each job has only the permissions it needs, adhering to the principle of least privilege. --- Suggested fixes powered by Copilot Autofix. Review carefully before merging. jmpsec/osctrl