Raffaele Di Fazio a6266dd5ff

Minimize GitHub Actions workflow permissions (#6319) ...

Apply principle of least privilege across all workflows:

- end-to-end-tests.yml: add missing permissions (contents: read)
- dependency-update.yaml: add missing permissions (contents: read)
- lint-test-chart.yaml: replace top-level read-all with permissions: {}
- release-chart.yaml: replace top-level read-all with permissions: {}
- codeql-analysis.yaml: remove unused actions: read
- lint.yaml: remove unused pull-requests: read
- staging-image-tester.yaml: remove unused checks: write (no goveralls step)

2026-03-27 23:22:47 +05:30

..

ci.yaml

Pin all GitHub Actions to commit SHAs per Kubernetes policy (#6316)

2026-03-27 20:14:47 +05:30

codeql-analysis.yaml

Minimize GitHub Actions workflow permissions (#6319)

2026-03-27 23:22:47 +05:30

dependency-update.yaml

Minimize GitHub Actions workflow permissions (#6319)

2026-03-27 23:22:47 +05:30

docs.yaml

chore(deps): bump the dev-dependencies group with 2 updates (#5962)

2025-12-05 11:30:57 -08:00

end-to-end-tests.yml

Minimize GitHub Actions workflow permissions (#6319)

2026-03-27 23:22:47 +05:30

gh-workflow-approve.yaml

chore(deps): bump the dev-dependencies group with 3 updates (#5806)

2025-09-05 00:35:27 -07:00

json-yaml-validate.yml

Pin all GitHub Actions to commit SHAs per Kubernetes policy (#6316)

2026-03-27 20:14:47 +05:30

lint-test-chart.yaml

Minimize GitHub Actions workflow permissions (#6319)

2026-03-27 23:22:47 +05:30

lint.yaml

Minimize GitHub Actions workflow permissions (#6319)

2026-03-27 23:22:47 +05:30

OWNERS

chore(deps): bump go-linter version (#6036)

2025-12-19 03:36:31 -08:00

release-chart.yaml

Minimize GitHub Actions workflow permissions (#6319)

2026-03-27 23:22:47 +05:30

staging-image-tester.yaml

Minimize GitHub Actions workflow permissions (#6319)

2026-03-27 23:22:47 +05:30

validate-crd.yml

chore(deps): bump the dev-dependencies group across 1 directory with 3 updates (#6226)

2026-02-27 13:33:55 +05:30