John Kennedy 32498764bd infra: add least-privilege permissions to workflow jobs (#11) ...

## Summary
- Adds explicit `permissions: contents: read` to all workflow jobs
flagged by code scanning for missing permissions
- Covers 6 workflow files and resolves all 11 open
`actions/missing-workflow-permissions` alerts
- Follows least-privilege principle — jobs only get the minimum
permissions they need

## Test plan
- [ ] Verify CI passes on this PR (workflows still function with
explicit read-only permissions)
- [ ] Confirm code scanning alerts are resolved after merge

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-28 21:55:18 +00:00

..

actions/poetry_setup

Initial commit

2024-05-31 11:54:34 -04:00

scripts

sema4: init package (#1)

2024-05-31 16:26:37 -04:00

workflows

infra: add least-privilege permissions to workflow jobs (#11)

2026-02-28 21:55:18 +00:00