chat-ui

acf9553a - Scope GITHUB_TOKEN permissions per job (#2604)

Scope GITHUB_TOKEN permissions per job (#2604) A job with no `permissions:` block inherits whatever the repository hands out. Each block added here grants what that job's own steps need and nothing more. Co-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>