fix: explicit set workflow permission and move secrets to necessary (#3484) [skip ci]

* fix: explicit set workflow permission and move secrets to necessary
steps only

* fix: comment

* fix: more permission restrict

* chore: add read for pypi
This commit is contained in:
NanoCode012
2026-03-16 11:13:05 +07:00
committed by GitHub
parent defee62d99
commit 4a5876df7a
9 changed files with 43 additions and 13 deletions

View File

@@ -5,6 +5,8 @@ on:
- cron: '0 0 1 * *' # Run monthly
workflow_dispatch: # Manual kickoff
permissions: {}
jobs:
auto-update:
runs-on: ubuntu-latest