This sets permissions: contents: read for the CI workflow. The matching change in Bitcoin Core is bitcoin/bitcoin#36513, for bitcoin/bitcoin#36512.
Part of #1959.
ci: Set read-only token permissions #1964
pull fametrano wants to merge 1 commits into bitcoin-core:master from fametrano:ci-harden-permissions-pins changing 1 files +3 −0-
fametrano commented at 12:39 PM on October 13, 2026: contributor
-
64753f0d99
ci: Set read-only token permissions
Give GITHUB_TOKEN only `contents: read`. Part of #1959.
- fametrano force-pushed on Oct 13, 2026
-
fametrano commented at 7:09 PM on October 13, 2026: contributor
I dropped
persist-credentials: falseto stay in sync with Core, where review found it adds nothing once the token is read-only (https://github.com/bitcoin/bitcoin/pull/36513#issuecomment-6146223556). The PR now only setspermissions: contents: read. - theStack added the label ci on Oct 16, 2026
Contributors
Labels