[Security campaign tracking] Copilot AutoFix: Missing Permissions in Workflows #14
Description
A new security campaign has been created in your repository. This issue has been automatically created to help you and your team plan and discuss how to fix the alerts in the campaign and reduce your security risk.
[Security campaign] Copilot AutoFix: Missing Permissions in Workflows
Description
Please see https://github.com/github/prodsec-engineering/issues/972 for context/details. Issues,PRs will be generated using Copilot AutoFix suggestions in your repos for workflows w/o permissions.Please review, update if needed, and merge by Feb 2nd 2026.
Due Date
Feb 2, 2026
Campaign manager
Contact the campaign managers using the link provided.