security: add explicit permissions to all GitHub Actions workflows #5948
Triggered via pull request
February 20, 2026 19:51
Status
Startup failure
Total duration
–
Artifacts
–
pull-request.yaml
on: pull_request
detect-changes
lint
/
lint
Matrix: agent / native
Waiting for pending jobs
Matrix: vscode / native
Waiting for pending jobs
generate-licenses
/
license-check
Matrix: e2e / cypress
Waiting for pending jobs
upload
/
upload
Annotations
1 error
|
Invalid workflow file:
.github/workflows/pull-request.yaml#L93
The workflow is not valid. .github/workflows/pull-request.yaml (Line: 93, Col: 3): Error calling workflow 'posit-dev/publisher/.github/workflows/generate-licenses.yaml@df89103296199458897af0a9b63e4de487b68571'. The workflow is requesting 'contents: write', but is only allowed 'contents: read'.
|