fix(ci): validate effective workflow contents permissions - #1248

Draft

seonghobae wants to merge 2 commits into

bolt-performance-chart-export-13223013812255847379from

repair/workflow-permissions-semantic-policy

Commits on Sep 21, 2026

test(security): reproduce workflow permission substring bypass
seonghobae
committed
d939aa6
fix(security): parse effective workflow contents permissions
seonghobae
committed
2f121f1