Adam Moussa cc54b1e28b chore(security): add explicit workflow permissions and bump aws-cdk-lib to 2.262.0 (#56) ... * docs: update aws profile specified in script (local renaming) * ci: add least-privilege permissions blocks to workflow callers Resolves code scanning alerts #3 and #4 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match." * chore(deps): bump aws-cdk-lib to 2.262.0 for patched brace-expansion Resolves Dependabot alert #4 (CVE-2026-13149, exponential-time DoS in brace-expansion expand()). The vulnerable 5.0.6 is a bundled dependency inside the aws-cdk-lib tarball, so it cannot be updated independently; 2.262.0 bundles the patched 5.0.7. Also migrates Stack#addDependency to addStackDependency (deprecated in this release) in bin/app.ts.		2026-07-23 17:38:17 +00:00
..
app.ts	chore(security): add explicit workflow permissions and bump aws-cdk-lib to 2.262.0 (#56)	2026-07-23 17:38:17 +00:00