mirror of
https://github.com/bbernhard/signal-cli-rest-api.git
synced 2026-06-11 17:20:17 +00:00
Caps GITHUB_TOKEN's blast radius. None of these workflows need any
GitHub API write scope — they only push to Docker Hub — so the safest
default is permissions: {}, matching the posture used by AsamK/signal-cli.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>