AIOSAIandClaude Opus 4.8 dab8d29645 security(ci): add least-privilege permissions block to e2e-wheel workflow ...

e2e-wheel.yml was the only workflow missing a top-level permissions: block
(added during cross-OS work after PR #624 hardened the rest), so it ran with
default broad GITHUB_TOKEN scopes -> OpenSSF Scorecard Token-Permissions = 0.
Add 'permissions: contents: read' to match the other 7 workflows. CHANGELOG
W24 entry.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-08 10:09:00 -07:00

..

ISSUE_TEMPLATE

remove: Gemini CLI support — delete .gemini/, GEMINI.md, strip all refs from setup.sh, README, init, prax monitoring, hooks, tests (DPLAN-0188)

2026-05-24 15:37:48 -07:00

scripts

fix(seedgo): readme check-ignore must match dir-only patterns on clean checkout (DPLAN-0195)

2026-06-06 00:19:38 -07:00

workflows

security(ci): add least-privilege permissions block to e2e-wheel workflow

2026-06-08 10:09:00 -07:00

dependabot.yml

chore: add hooks, CI/CD infrastructure, ignore runtime JSON

2026-03-06 20:33:40 -08:00