fix: address security risks in GitHub Actions workflows (#1651)

* Remove cache consumption in release workflow.

* Tighten style-check.yml permissions

* Tighten permissions in test workflow that consumes cache.

* Use stricter permissions where possible

---------

Co-authored-by: Justin Halsall <Juice10@users.noreply.github.com>
This commit is contained in:
Adnan Khan
2026-04-01 12:00:00 +08:00
committed by GitHub
parent bd367c2a73
commit ae96fefdd4
3 changed files with 10 additions and 1 deletions

View File

@@ -19,7 +19,6 @@ jobs:
uses: actions/setup-node@v3
with:
node-version: lts/*
cache: 'yarn'
- name: Install Dependencies
run: yarn install --frozen-lockfile