From 614bdc237fab42ab9fdf9de6f605a553fb6a0f33 Mon Sep 17 00:00:00 2001
From: Bhargavi-BS <bhargavi@browserstack.com>
Date: Fri, 29 May 2026 04:07:14 +0530
Subject: [PATCH] security changes

---
 .github/CODEOWNERS | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 09a587d..8e15543 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,3 +1,6 @@
-.github/* @browserstack/asi-devs
-
+# CODEOWNERS uses last-match-wins precedence, so least-specific rules must come
+# first. The broad catch-all is listed before the .github/** rule so that the
+# latter is the *last* (winning) match for workflow/config files (SDK-6071).
 * @browserstack/automate-public-repos
+
+.github/** @browserstack/asi-devs
\ No newline at end of file