From 0878f58dbb31732bee641892347719660df02189 Mon Sep 17 00:00:00 2001 From: Boshen Date: Thu, 7 May 2026 14:34:49 +0800 Subject: [PATCH 1/2] chore(ci): bump security-action to v1.0.4 with explicit token Pin oxc-project/security-action to v1.0.4 and pass GITHUB_TOKEN explicitly so checkout works on this private repo. Adds contents: read since the workflow-level permissions are empty. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/security.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 175e69bf1..f6179890e 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -20,5 +20,9 @@ jobs: security: name: Security Analysis runs-on: ubuntu-latest + permissions: + contents: read steps: - - uses: oxc-project/security-action@781317603d045c3eafc99daef653fcac77e12aa8 # v1.0.3 + - uses: oxc-project/security-action@d94d8a04d0cfe578a32d61ee2bff7e2891049704 # v1.0.4 + with: + token: ${{ secrets.GITHUB_TOKEN }} From 6cde1ad1a75201e658da1e99d7c46786aaedc8d0 Mon Sep 17 00:00:00 2001 From: Boshen Date: Thu, 7 May 2026 14:47:49 +0800 Subject: [PATCH 2/2] chore(ci): bump security-action to v1.0.5 Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index f6179890e..b4167c212 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -23,6 +23,6 @@ jobs: permissions: contents: read steps: - - uses: oxc-project/security-action@d94d8a04d0cfe578a32d61ee2bff7e2891049704 # v1.0.4 + - uses: oxc-project/security-action@77e230508eccbb400b23746dab6c573a8ea7483e # v1.0.5 with: token: ${{ secrets.GITHUB_TOKEN }}