[AAASM-3993] 🔧 (ci): Least-privilege permissions + minimize reusable-wf secret exposure#201

Merged

Chisanan232 merged 9 commits into

v0.0.1/AAASM-3993/config/ci_least_privilege

Jul 2, 2026

Commits on Jul 2, 2026

🔧 (ci): Add least-privilege permissions to benchmarks workflow

Chisanan232
and
claude
committed
🔧 (ci): Add least-privilege permissions to CI workflow

Chisanan232
and
claude
committed
🔧 (ci): Add least-privilege permissions to CI+E2E workflow

Chisanan232
and
claude
committed
🔧 (ci): Add least-privilege permissions to native-core-build workflow

Chisanan232
and
claude
committed
🔧 (ci): Add least-privilege permissions to type-check workflow

Chisanan232
and
claude
committed
🔧 (ci): Add least-privilege permissions to rw_build_and_test workflow

Chisanan232
and
claude
committed
🔧 (ci): Add least-privilege permissions to rw_run_all_test_and_record workflow

Chisanan232
and
claude
committed
🔧 (ci): Document third-party reusable-wf trust + secret scope in rw_build_and_test

Chisanan232
and
claude
committed
🔧 (ci): Document third-party reusable-wf trust + secret scope in rw_run_all_test_and_record

Chisanan232
and
claude
committed