Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
158 changes: 0 additions & 158 deletions .github/GOVERNANCE.md

This file was deleted.

1 change: 1 addition & 0 deletions .github/workflows/boj-build.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -31,4 +31,5 @@ jobs:
-d "{\"repo\": \"${{ github.repository }}\", \"branch\": \"${{ github.ref_name }}\", \"engine\": \"casket\"}" \
|| echo "BoJ server unreachable — skipping (non-fatal)"
permissions:
actions: read
contents: read
1 change: 1 addition & 0 deletions .github/workflows/casket-pages.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -7,6 +7,7 @@ on:
workflow_dispatch:

permissions:
actions: read
contents: read
pages: write
id-token: write
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/codeql.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -18,6 +18,7 @@ concurrency:
cancel-in-progress: true

permissions:
actions: read
contents: read

jobs:
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/dependabot-automerge.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -41,6 +41,7 @@ on:
types: [opened, reopened, synchronize]

permissions:
actions: read
contents: write # needed to enable auto-merge
pull-requests: write # needed to approve
# NB: keep narrow — do NOT add secrets: read or id-token: write here.
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/dogfood-gate.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -13,6 +13,7 @@ on:
branches: [main, master]

permissions:
actions: read
contents: read

jobs:
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/governance.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -9,8 +9,9 @@ on:
workflow_dispatch:

permissions:
actions: read
contents: read

jobs:
governance:
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
3 changes: 2 additions & 1 deletion .github/workflows/hypatia-scan.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -11,9 +11,10 @@ on:
workflow_dispatch:

permissions:
actions: read
contents: read
security-events: write

jobs:
scan:
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
1 change: 1 addition & 0 deletions .github/workflows/instant-sync.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -9,6 +9,7 @@ on:
types: [published]

permissions:
actions: read
contents: read

jobs:
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/mirror.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -7,9 +7,10 @@ on:
workflow_dispatch:

permissions:
actions: read
contents: read

jobs:
mirror:
uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
secrets: inherit
1 change: 1 addition & 0 deletions .github/workflows/push-email-notify.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -7,6 +7,7 @@ name: Push email notification
on:
push: {}
permissions:
actions: read
contents: read
jobs:
notify:
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/release.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -12,6 +12,7 @@ on:
- 'v*'

permissions:
actions: read
contents: read

jobs:
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/rhodibot.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -21,6 +21,7 @@ on:
types: [completed]

permissions:
actions: read
contents: write
pull-requests: write

Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/scorecard.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -9,11 +9,12 @@ on:
workflow_dispatch:

permissions:
actions: read
contents: read

jobs:
scorecard:
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
permissions:
contents: read
security-events: write
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/secret-scanner.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -11,11 +11,12 @@ concurrency:
cancel-in-progress: true

permissions:
actions: read
contents: read

jobs:
scan:
permissions:
contents: read
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
secrets: inherit
1 change: 1 addition & 0 deletions .github/workflows/static-analysis-gate.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -10,6 +10,7 @@ on:
branches: [main, master]

permissions:
actions: read
contents: read

jobs:
Expand Down
18 changes: 0 additions & 18 deletions guix.scm

This file was deleted.