apm-wo-analysis/lambdas
Adam Moussa 299ead89b3
Some checks are pending
Deploy / deploy (push) Waiting to run
chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36)
* fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching.

* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
2026-07-23 19:10:45 +00:00
..
classifier chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36) 2026-07-23 19:10:45 +00:00
slack_post Update slack-sdk requirement in /lambdas/slack_post (#28) 2026-07-02 15:23:37 -04:00