fix: explicit set workflow permission and move secrets to necessary (#3484) [skip ci]

* fix: explicit set workflow permission and move secrets to necessary steps only * fix: comment * fix: more permission restrict * chore: add read for pypi
2026-03-16 11:13:05 +07:00
parent defee62d99
commit 4a5876df7a
9 changed files with 43 additions and 13 deletions
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -13,6 +13,9 @@ on:
       - ".pre-commit-config.yaml"
  workflow_dispatch:

+permissions:
+  contents: read
+
 jobs:
  pre-commit:
    name: pre-commit