Highlights
Token Privilege Escalation: 1 prior fix. Scrutinize any change in this area.
(.github/workflows/main.yml): most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Token Privilege Escalation: The build workflow previously executed with over-privileged default GITHUB_TOKEN permissions, which could allow unauthorized write access or privilege escalation if the build environment or a dependency were compromised.