#652 Potential fix for code scanning alert no. 19: Workflow does not contain permissions Pull request opened by javuto Potential fix for https://github.com/jmpsec/osctrl/security/code-scanning/19 To fix the issue, we will add a

permissions

block to the workflow. At the root level, we will set the default permissions to

contents: read

, which is sufficient for most CI workflows. For jobs that require additional permissions, such as

push_docker_images

, we will define job-specific permissions to grant only the necessary access. --- Suggested fixes powered by Copilot Autofix. Review carefully before merging. jmpsec/osctrl