Skip to content

ci: declare read-only token permissions on formatter check#563

Open
arpitjain099 wants to merge 1 commit into
facebookresearch:mainfrom
arpitjain099:chore/restrict-workflow-token-perms
Open

ci: declare read-only token permissions on formatter check#563
arpitjain099 wants to merge 1 commit into
facebookresearch:mainfrom
arpitjain099:chore/restrict-workflow-token-perms

Conversation

@arpitjain099

Copy link
Copy Markdown

Adds permissions: contents: read to the SAM3/ufmt formatting check workflow.

The workflow only runs a Python formatter check on PRs. It does not write to the repository or interact with the GitHub API in ways that need write access. Restricting the GITHUB_TOKEN to read-only follows the principle of least privilege.

Signed-off-by: Arpit Jain <arpitjain099@gmail.com>
@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Meta Open Source bot. label May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Meta Open Source bot.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant