apm-wo-analysis/.github/workflows
Adam Moussa 299ead89b3
Some checks are pending
Deploy / deploy (push) Waiting to run
chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36)
* fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching.

* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
2026-07-23 19:10:45 +00:00
..
ci.yaml chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36) 2026-07-23 19:10:45 +00:00
dependency-review.yml chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36) 2026-07-23 19:10:45 +00:00
deploy.yaml chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#30) 2026-07-06 18:27:14 -04:00
labeler.yml chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#30) 2026-07-06 18:27:14 -04:00