chore: Add CD pipline for syft-restrict#9455

Open

rasswanth-s wants to merge 6 commits into

devfrom

rasswanth/enclaves-demo

GitHub Advanced Security / CodeQL succeeded Jul 21, 2026 in 3s

3 new alerts including 3 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

3 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 80 in .github/workflows/cd-monorepo.yml

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Check warning on line 97 in .github/workflows/cd-monorepo.yml

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Check warning on line 204 in .github/workflows/unit-tests.yml

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}