From 15fb1145237cab1ea016375c716f2530afc4c4cb Mon Sep 17 00:00:00 2001 From: Saqib Date: Thu, 17 Sep 2026 18:39:14 +0530 Subject: [PATCH 1/2] ci: backport the django-tests.yml permissions block to dev A code-scanning autofix added it on main only (#191), so the file differed between branches and the next release would conflict. Fixes #196. --- .github/workflows/django-tests.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/django-tests.yml b/.github/workflows/django-tests.yml index 71681e2..6bca8c2 100644 --- a/.github/workflows/django-tests.yml +++ b/.github/workflows/django-tests.yml @@ -9,6 +9,9 @@ on: branches: [dev, main] workflow_call: +permissions: + contents: read + jobs: django-tests: runs-on: ubuntu-latest From da8b4cce629df9a58db44981577c9bd6b6cc19d6 Mon Sep 17 00:00:00 2001 From: Saqib Date: Thu, 17 Sep 2026 18:39:14 +0530 Subject: [PATCH 2/2] ci: backport the deploy-backend.yml permissions block to dev Same drift as django-tests.yml: main has had it since the gating release and prod deploys run with it. --- .github/workflows/deploy-backend.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/deploy-backend.yml b/.github/workflows/deploy-backend.yml index 38ea4df..693c7c6 100644 --- a/.github/workflows/deploy-backend.yml +++ b/.github/workflows/deploy-backend.yml @@ -51,6 +51,9 @@ name: Deploy Backend to EC2 +permissions: + contents: read + on: push: branches: ['dev', 'main']