payments-dashboard/.github/workflows
Adam Moussa 849f33a0bc
Some checks failed
Deploy / deploy (push) Has been cancelled
chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) (#81)
* ci: add least-privilege permissions blocks to workflow callers

Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.

* enhance(email): improve detection of allowed Gusto URLs in email classification

Resolves code scanning alert #2
2026-07-23 20:38:07 +00:00
..
ci.yaml chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) (#81) 2026-07-23 20:38:07 +00:00
dependency-review.yml chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) (#81) 2026-07-23 20:38:07 +00:00
deploy.yaml chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#58) 2026-07-06 18:27:02 -04:00
labeler.yml chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#58) 2026-07-06 18:27:02 -04:00