Skip to content

Comments

Add minimal permissions to dotnet workflow for improved security#2940

Open
JeetKarena wants to merge 1 commit intoactions:mainfrom
JeetKarena:main
Open

Add minimal permissions to dotnet workflow for improved security#2940
JeetKarena wants to merge 1 commit intoactions:mainfrom
JeetKarena:main

Conversation

@JeetKarena
Copy link

This PR updates the Dotnet workflow to include permissions: contents: read, ensuring the workflow follows the principle of least privilege and improves security.

Key changes:

  • Added permissions: contents: read to the workflow file.

No functional changes to the build or test steps.


Checklist

  • Workflow file is in the correct directory and uses lower-kebab-case.
  • Workflow name is "dotnet".
  • Step names use sentence case.
  • Workflow uses $default-branch for triggers (if applicable).
  • Includes permissions: contents: read.
  • Only official GitHub or ecosystem actions used.
  • Comments are present and clear.

Add minimal permissions to dotnet workflow for improved security
@JeetKarena JeetKarena requested review from a team as code owners June 27, 2025 15:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants