Address the CodeRabbit review: inbound SMS, binary payloads and untrusted input

2026-08-27 11:52:43 +02:00
parent 884afdb87b
commit 8a182604b7
23 changed files with 603 additions and 152 deletions
@@ -5,11 +5,16 @@ on:
    branches: ['**']
  pull_request:

+permissions:
+  contents: read
+
 jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
      - uses: actions/setup-node@v5
        with:
          cache: npm
@@ -27,6 +32,8 @@ jobs:
        node: ['18', '20', '22', '24']
    steps:
      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
      - uses: actions/setup-node@v5
        with:
          cache: npm