Claude 64e8f87f86 ci: restrict the test workflow's GITHUB_TOKEN to contents:read ...

CodeQL flagged the new unit-tests job for running with the default
unrestricted token; the pre-existing job had the same exposure. Both
jobs only check out the repo and run pytest, so a workflow-level
contents:read is sufficient.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FgbA8SMutQQpXkMG8LMmC4

2026-08-01 14:16:51 +00:00

..

ISSUE_TEMPLATE

docs: refresh and correct stale documentation across repo (#306)

2026-04-07 21:04:25 -04:00

workflows

ci: restrict the test workflow's GITHUB_TOKEN to contents:read

2026-08-01 14:16:51 +00:00

FUNDING.yml

Plugins (#145)

2025-12-27 14:15:49 -05:00

PULL_REQUEST_TEMPLATE.md

docs: refresh and correct stale documentation across repo (#306)

2026-04-07 21:04:25 -04:00