mirror of
https://github.com/LearningCircuit/local-deep-research.git
synced 2026-06-16 03:51:07 +03:00
- Add required permissions blocks to workflow files (Checkov CKV2_GHA_1) - check-css-classes.yml: contents: read, pull-requests: write - notification-tests.yml: contents: read - security-file-write-check.yml: contents: read - mobile-ui-tests.yml: contents: read, checks: write - responsive-ui-tests-enhanced.yml: contents: read - Fix shellcheck SC2086 warnings in check-file-writes.sh - Add disable comments for intentional word splitting - Fix zizmor template-injection vulnerabilities in release.yml - Move template expansions to env blocks - Use environment variables in shell commands and scripts - Use process.env in github-script blocks - Remove workflow_dispatch inputs from responsive-ui-tests-enhanced.yml (fixes Checkov CKV_GHA_7)