ci: harden base-demo validation workflow - #261

Merged

codeforester merged 1 commit into

mainfrom

security/253-20260827-restrict-base-demo-validation-workflow-token-permissions

Aug 27, 2026

codeforester commented Aug 27, 2026 •

edited

Loading

Collaborator

Summary

declare a read-only contents: read token default for validation
bound every validation job with an explicit timeout
add repository validation guards so both contracts stay enforced

Validation

mise run validate (isolated mise/npm/Gradle caches)
git diff --check

Fixes #253
Fixes #255


          ci: harden base-demo validation workflow

bdfedb6

codeforester merged commit 429ad64 into main

5 checks passed

codeforester deleted the security/253-20260827-restrict-base-demo-validation-workflow-token-permissions branch

August 27, 2026 07:43

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet