Fix CodeQL warnings

.github/workflows/ci.yml

@@ -7,6 +7,9 @@ on:
   pull_request:
     branches:
       - develop
+      
+permissions:
+  contents: read
 
 jobs:
   typecheck:

.github/workflows/release.yml

@@ -8,6 +8,9 @@ on:
   schedule:
     - cron: "0 2 * * *" # run at 2 AM UTC
 
+permissions:
+  contents: read
+
 jobs:
   web:
     name: Push website Docker image to registry

components/NewsDirectory.vue

@@ -151,11 +151,8 @@ const toggleTag = (tag: string) => {
 };
 
 const formatExcerpt = (excerpt: string) => {
-  // TODO: same as one in NewsArticleCreateButton
-  // Convert markdown to HTML
-  const html = micromark(excerpt);
-  // Strip HTML tags using regex
-  return html.replace(/<[^>]*>/g, "");
+  // Convert markdown to HTML, micromark is safe
+  return micromark(excerpt);
 };
 
 const filteredArticles = computed(() => {