Satoshi Qazi Muhammed 1a4d109f69 ci: give every workflow an explicit least-privilege GITHUB_TOKEN ...

CodeQL actions/missing-workflow-permissions: chain-endpoints.yml, lock.yml, pr-any.yml, test-nightly.yml had no permissions block, so their jobs received the repository default token. Read-only where nothing writes through GITHUB_TOKEN; lock-threads gets the issues/pull-requests/discussions write it documents; workflows that write do it with a separate bot or app token, so GITHUB_TOKEN stays read-only.

2026-10-20 22:29:20 +04:00

..

deploy

Deploy apps.pezkuwichain.io from main behind an approval

2026-10-04 04:33:58 +04:00

scripts

Run the .slow. specs on the dev-node image published from pezkuwi-DKS (#100)

2026-10-16 05:58:05 +04:00

workflows

ci: give every workflow an explicit least-privilege GITHUB_TOKEN

2026-10-20 22:29:20 +04:00

chain-endpoints.md

fix: update URLs and fix workflow authentication

2026-01-08 00:00:35 +03:00

issue_template.md

fix: update URLs and fix workflow authentication

2026-01-08 00:00:35 +03:00