@swagger-api/apidom-parser-adapter-openapi-yaml-3-1

Dangerous workflowscaution

One workflow uses pull_request_target and two use workflow_run, which warrants review, but no analyzed workflow performs an untrusted checkout or contains detected script injection.

Token permissionscaution

All seven workflows lack top-level token permissions and none has read-only permissions declared; although no top-level write access was detected and two workflows constrain permissions at job level, the absence of explicit least-privilege defaults is a genuine CI hygiene concern.