From 3c42a3f359450a8ddf2f03f1655019d7ed916fc2 Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Sun, 2 Aug 2026 17:42:51 +0530 Subject: [PATCH 1/3] sca-scan.yml --- .github/workflows/sca-scan.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml index 2307d48..79b6557 100644 --- a/.github/workflows/sca-scan.yml +++ b/.github/workflows/sca-scan.yml @@ -5,6 +5,9 @@ on: jobs: security-sca: runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write steps: - uses: actions/checkout@master - name: Run Snyk to check for vulnerabilities From 1d2d8b665056a44de9528dfbce5e32b556a5218c Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Tue, 8 Sep 2026 18:28:15 +0530 Subject: [PATCH 2/3] Updated codeowners --- CODEOWNERS | 11 ++--------- 1 file changed, 2 insertions(+), 9 deletions(-) diff --git a/CODEOWNERS b/CODEOWNERS index 0496bc6..7d3f09c 100644 --- a/CODEOWNERS +++ b/CODEOWNERS @@ -1,11 +1,4 @@ * @contentstack/devex-pr-reviewers - -.github/workflows/sca-scan.yml @contentstack/security-admin - -.github/workflows/codeql-anaylsis.yml @contentstack/security-admin - +.github/workflows/ @contentstack/security-admin **/.snyk @contentstack/security-admin - -.github/workflows/policy-scan.yml @contentstack/security-admin - -.github/workflows/issues-jira.yml @contentstack/security-admin +**/CODEOWNERS @contentstack/security-admin \ No newline at end of file From b020d9796194506d0e2a912e7608665aa733b71e Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Thu, 10 Sep 2026 10:11:51 +0530 Subject: [PATCH 3/3] Updated codeowners --- CODEOWNERS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CODEOWNERS b/CODEOWNERS index 7d3f09c..ac7dad0 100644 --- a/CODEOWNERS +++ b/CODEOWNERS @@ -1,4 +1,4 @@ -* @contentstack/devex-pr-reviewers +* @contentstack/developer-ecosystem-pr-reviewers .github/workflows/ @contentstack/security-admin **/.snyk @contentstack/security-admin **/CODEOWNERS @contentstack/security-admin \ No newline at end of file