oracola91 05ac6a911c ci: read-only token for the CI workflow (#4026) ...

ci.yml had no permissions block, so its token got the repository
default. Its jobs only check out code, restore caches and upload
artifacts, so contents: read is enough.

The permissions half of item 6 in #1114.

2026-10-23 10:19:22 -04:00

..

ci.yml

ci: read-only token for the CI workflow (#4026)

2026-10-23 10:19:22 -04:00

freebsd.yml

M7: support shaped Thai text in Add Text and UI fallback fonts (#767)

2026-10-11 18:07:36 -04:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:57:29 -04:00

packaging-lint.yml

ci: refactor workflows to use storytold/craft-common-actions (#1073)

2026-10-11 11:51:25 -04:00

release.yml

Release workflow: pass the Azure signing secrets so Windows builds are signed (#1194)

2026-10-12 11:08:29 -04:00

sonarcloud.yml

ci: add SonarCloud scan via shared reusable workflow

2026-10-21 15:47:03 -04:00

windows-arm64.yml

ci: refactor workflows to use storytold/craft-common-actions (#1073)

2026-10-11 11:51:25 -04:00