From dccc38eb4b14196e78e7cedbb762d8a7e2c37cc3 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 18 May 2026 16:49:33 +0000
Subject: [PATCH] ci: harden workflow permissions and set explicit x64 target

Agent-Logs-Url: https://github.com/zhicheng233/PN532-Aime-Reader/sessions/73dfcbc2-3d6b-4ca6-8b7e-cfe78c3bd8a0

Co-authored-by: zhicheng233 <71439504+zhicheng233@users.noreply.github.com>
---
 .github/workflows/build-on-commit.yml | 5 ++++-
 .github/workflows/release-on-tag.yml  | 4 ++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-on-commit.yml b/.github/workflows/build-on-commit.yml
index ee1e153..020e0a5 100644
--- a/.github/workflows/build-on-commit.yml
+++ b/.github/workflows/build-on-commit.yml
@@ -5,6 +5,9 @@ on:
     tags-ignore:
       - '*'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: windows-latest
@@ -23,7 +26,7 @@ jobs:
         run: nuget restore .\\PN532-Aime-Reader.sln
 
       - name: Build NfcAime.Dll (x64, no project references)
-        run: msbuild .\\src\\NfcAime.Dll\\NfcAime.Dll.csproj /p:Configuration=Release /p:Platform="Any CPU" /p:BuildProjectReferences=false
+        run: msbuild .\\src\\NfcAime.Dll\\NfcAime.Dll.csproj /p:Configuration=Release /p:Platform="Any CPU" /p:PlatformTarget=x64 /p:BuildProjectReferences=false
 
       - name: Upload build artifact
         uses: actions/upload-artifact@v4
diff --git a/.github/workflows/release-on-tag.yml b/.github/workflows/release-on-tag.yml
index c2c1e49..f00e4c2 100644
--- a/.github/workflows/release-on-tag.yml
+++ b/.github/workflows/release-on-tag.yml
@@ -28,7 +28,7 @@ jobs:
         run: nuget restore .\\PN532-Aime-Reader.sln
 
       - name: Build NfcAime.Dll (x64, no project references)
-        run: msbuild .\\src\\NfcAime.Dll\\NfcAime.Dll.csproj /p:Configuration=Release /p:Platform="Any CPU" /p:BuildProjectReferences=false
+        run: msbuild .\\src\\NfcAime.Dll\\NfcAime.Dll.csproj /p:Configuration=Release /p:Platform="Any CPU" /p:PlatformTarget=x64 /p:BuildProjectReferences=false
 
       - name: Generate commit notes since previous tag
         shell: pwsh
@@ -51,7 +51,7 @@ jobs:
 
           @"
           ## Build Artifact
-          - NfcAime.Dll.dll (x64, Release)
+          - NfcAime.Dll.dll (Release, PlatformTarget=x64)
 
           $commitTitle
           $commits