From 1791682cc5f913f60c735463efe38a2377bf2366 Mon Sep 17 00:00:00 2001 From: Shlee Date: Fri, 18 Sep 2026 23:24:28 +0930 Subject: [PATCH 1/3] Potential fix for code scanning alert no. 5003: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/php-pint.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/php-pint.yml b/.github/workflows/php-pint.yml index 1fdbd2fea..57b71df5e 100644 --- a/.github/workflows/php-pint.yml +++ b/.github/workflows/php-pint.yml @@ -6,6 +6,9 @@ on: pull_request: branches: [dev] +permissions: + contents: read + jobs: pint: runs-on: ubuntu-latest From 7a94f2e7e6c223e3a4852360992e8ce0dac08fc7 Mon Sep 17 00:00:00 2001 From: Shlee Date: Fri, 18 Sep 2026 23:25:35 +0930 Subject: [PATCH 2/3] Update php-larastan.yml --- .github/workflows/php-larastan.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/php-larastan.yml b/.github/workflows/php-larastan.yml index e99ec65f3..149ce4eb2 100644 --- a/.github/workflows/php-larastan.yml +++ b/.github/workflows/php-larastan.yml @@ -1,5 +1,8 @@ name: PHP - Larastan +permissions: + contents: read + on: push: branches: [staging, dev, unstable] From 217920dd3bfb1998a908b03c3f70829d0baecba0 Mon Sep 17 00:00:00 2001 From: Shlee Date: Fri, 18 Sep 2026 23:25:48 +0930 Subject: [PATCH 3/3] Update php-laravel-tests.yml --- .github/workflows/php-laravel-tests.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/php-laravel-tests.yml b/.github/workflows/php-laravel-tests.yml index 7d2be6672..e7b481f5a 100644 --- a/.github/workflows/php-laravel-tests.yml +++ b/.github/workflows/php-laravel-tests.yml @@ -1,5 +1,8 @@ name: PHP - Laravel Tests +permissions: + contents: read + on: push: branches: [staging, dev, unstable]