[Aikido] AI Fix for Overly Broad Permissions in GitHub Actions Workflows is risky - #297

Merged

Kvarkas merged 7 commits into

fix/aikido-security-sast-121315106-bzdu

Sep 22, 2026

Commits on Sep 22, 2026

fix(security): autofix Overly Broad Permissions in GitHub Actions Workflows is risky
aikido-autofix[bot]
authored
19468dd
chore: preconfigure copilot agent environment

Copilot
and
Kvarkas
authored
ae7480f
fix(workflow): isolate nightly metadata updates to write-scoped job

Copilot
and
Kvarkas
authored
6f902b6
fix(workflow): harden checkout refs and build gating

Copilot
and
Kvarkas
authored
eb98eac
fix(workflow): split dispatch and non-dispatch build jobs

Copilot
and
Kvarkas
authored
ac4e422
fix(workflow): separate deploy paths by event type

Copilot
and
Kvarkas
authored
b2aaf11
fix(workflow): build non-dispatch events from trigger ref

Copilot
and
Kvarkas
authored
5ba8e46