Nathan Vasse 768f616859 🔒️(ci) restrict drive-frontend workflow token to contents:read ...

CodeQL flagged the workflow for running with default GITHUB_TOKEN
permissions. None of the jobs need write scopes, so pin to the
minimum to contain blast radius if a third-party action is
compromised.

2026-04-08 17:27:58 +02:00

..

ISSUE_TEMPLATE

🎉(core) shape of the project

2025-01-29 17:08:23 +01:00

workflows

🔒️(ci) restrict drive-frontend workflow token to contents:read

2026-04-08 17:27:58 +02:00

ISSUE_TEMPLATE.md

🎉(core) shape of the project

2025-01-29 17:08:23 +01:00

PULL_REQUEST_TEMPLATE.md

🎉(core) shape of the project

2025-01-29 17:08:23 +01:00