mirror of
https://github.com/astral-sh/uv
synced 2026-01-23 22:40:10 -05:00
## Summary Continuing to burn these down, one at a time. This eliminates some implicit credentials, moves a permission block to its minimum scope of effect, and removes an (unexploitable) template expansion. @konstin to answer your earlier question: I tried `permissions:` this time and got a syntax warning, so I suspect it _needs_ to be an empty mapping object here 🙂 ## Test Plan I will manually dispatch this workflow once the PR is open. Edit: Dispatched: https://github.com/astral-sh/uv/actions/runs/16787049700/job/47540074086 Signed-off-by: William Woodruff <william@astral.sh>