From ab3029fc03eb01c3c3df97c2244ee716e43f4655 Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 14:39:48 -0400 Subject: [PATCH 1/2] ci: scope down permissions for pr-title.yaml --- .github/workflows/pr-title.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/pr-title.yaml b/.github/workflows/pr-title.yaml index bcef4216..8a048b6b 100644 --- a/.github/workflows/pr-title.yaml +++ b/.github/workflows/pr-title.yaml @@ -7,6 +7,9 @@ on: - edited - synchronize +permissions: + contents: read + jobs: main: name: Validate PR title From 682db58339b91112120eed9e9e9cfec92f5c707d Mon Sep 17 00:00:00 2001 From: Adnan Khan Date: Tue, 21 Oct 2025 14:39:49 -0400 Subject: [PATCH 2/2] ci: scope down permissions for publish-docs.yaml --- .github/workflows/publish-docs.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/publish-docs.yaml b/.github/workflows/publish-docs.yaml index 394cca66..60cd6068 100644 --- a/.github/workflows/publish-docs.yaml +++ b/.github/workflows/publish-docs.yaml @@ -16,6 +16,9 @@ on: env: PYTHON_VERSION: 3.11 +permissions: + contents: write + jobs: build: name: Deploy docs