Dylan M. TaylorandCodebuff 7bf5905ac9 security: write the release from the release job only (SonarCloud S8233) (#2021) ...

The workflow-level contents: write granted every job the right to push
tags and releases; the reusable release workflow is the only job that
needs it. Workflow level drops to read.

🤖 Generated with Codebuff

Co-authored-by: Codebuff <noreply@codebuff.com>

2026-10-23 17:28:41 -04:00

..

ci.yml

CI: run the gate through craft-common-actions' shared gate.yml; FreeBSD nightly and on release (#1987)

2026-10-23 13:56:16 -04:00

freebsd.yml

CI: run the gate through craft-common-actions' shared gate.yml; FreeBSD nightly and on release (#1987)

2026-10-23 13:56:16 -04:00

nix.yml

Xrefs and data links: resolve stored paths with craft-docpath's resolve_absolute (#1750)

2026-10-23 16:42:01 -04:00

packaging-lint.yml

ci: refactor workflows to use storytold/craft-common-actions (#605)

2026-10-11 11:51:11 -04:00

release.yml

security: write the release from the release job only (SonarCloud S8233) (#2021)

2026-10-23 17:28:41 -04:00

sonarcloud.yml

ci(sonar): don't cancel superseded runs on main, so coverage is published

2026-10-23 16:50:42 -04:00

windows-arm64.yml

CI: run the gate through craft-common-actions' shared gate.yml; FreeBSD nightly and on release (#1987)

2026-10-23 13:56:16 -04:00