From f9e68b01bcee8087a33bc840a01c453d886fd647 Mon Sep 17 00:00:00 2001 From: Ryan Hoerr Date: Fri, 15 May 2026 23:36:14 -0400 Subject: [PATCH] chore(workflows): drop write scope from full-integration-tests The workflow only checks out code and runs tests; nothing pushes commits, tags, or releases. As a reusable workflow_call, the elevated scope also propagated to callers' tokens. Co-Authored-By: Claude Opus 4.7 --- .github/workflows/full-integration-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/full-integration-tests.yaml b/.github/workflows/full-integration-tests.yaml index 136ebc5..eb72ff4 100644 --- a/.github/workflows/full-integration-tests.yaml +++ b/.github/workflows/full-integration-tests.yaml @@ -20,7 +20,7 @@ on: required: false permissions: - contents: write + contents: read jobs: matrix-calculator: