fix: harden workflow token permissions and pin yamllint - #218

Merged

marcusburghardt merged 7 commits into

complytime:mainfrom

marcusburghardt:fix/security-workflow-permissions

Sep 4, 2026

Commits on Sep 4, 2026

fix: add permissions and pin yamllint in peribolos-validate workflow
marcusburghardt
committed
2b76c68
fix: add top-level permissions to peribolos-apply workflow
marcusburghardt
committed
df09552
fix: add top-level permissions to peribolos-drift workflow
marcusburghardt
committed
9150555
fix: disable credential persistence in peribolos-validate checkout
marcusburghardt
committed
38a32e3
fix: disable credential persistence in peribolos-apply checkouts
marcusburghardt
committed
6e692a8
fix: disable credential persistence in peribolos-drift checkouts
marcusburghardt
committed
f84887e
fix: add zizmor config to ignore github-app for peribolos workflows
marcusburghardt
committed
4ca2959