-
Notifications
You must be signed in to change notification settings - Fork 0
Update 8hobbies/workflows digest to c95f86b #220
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
@@ -22,4 +22,4 @@ | |||
|
|||
jobs: | |||
lint: | |||
uses: 8hobbies/workflows/.github/workflows/npm-lint.yml@48a7222d056fc9b96243ff58bf4933e5ed4415e0 | |||
uses: 8hobbies/workflows/.github/workflows/npm-lint.yml@c95f86bbd0d7f9f7fb4866b1edd66c3972219e80 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 14 days ago
To fix the issue, add a permissions
block at the root of the workflow. This block will explicitly define the permissions required for the workflow. Since this is a linting workflow, it likely only needs read access to the repository contents. The permissions
block should be added after the name
field and before the on
field.
-
Copy modified lines R16-R17
@@ -15,2 +15,4 @@ | ||
name: Lint | ||
permissions: | ||
contents: read | ||
|
@@ -22,4 +22,4 @@ | |||
|
|||
jobs: | |||
run: | |||
uses: 8hobbies/workflows/.github/workflows/npm-publish-dry-run.yml@48a7222d056fc9b96243ff58bf4933e5ed4415e0 | |||
uses: 8hobbies/workflows/.github/workflows/npm-publish-dry-run.yml@c95f86bbd0d7f9f7fb4866b1edd66c3972219e80 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 14 days ago
To fix the issue, add a permissions
block to the root of the workflow file. This block will explicitly define the permissions required for the workflow, ensuring that the GITHUB_TOKEN
has only the necessary access. Since the workflow appears to be related to publishing (dry run), it likely requires read access to repository contents and no write access.
The permissions block should be added after the name
field and before the on
field. The recommended permissions are:
contents: read
for accessing repository files.
-
Copy modified lines R16-R17
@@ -15,2 +15,4 @@ | ||
name: Publish Dry Run | ||
permissions: | ||
contents: read | ||
|
@@ -22,4 +22,4 @@ | |||
|
|||
jobs: | |||
test: | |||
uses: 8hobbies/workflows/.github/workflows/npm-runtime.yml@48a7222d056fc9b96243ff58bf4933e5ed4415e0 | |||
uses: 8hobbies/workflows/.github/workflows/npm-runtime.yml@c95f86bbd0d7f9f7fb4866b1edd66c3972219e80 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 14 days ago
To fix the issue, add a permissions
block to the root of the workflow or the specific job. Since the workflow uses a reusable workflow, the permissions should be set at the job level to ensure the GITHUB_TOKEN
has the least privileges required for the reusable workflow to function. Based on the recommendation, the minimal permissions block should include contents: read
.
-
Copy modified lines R25-R26
@@ -24,2 +24,4 @@ | ||
test: | ||
permissions: | ||
contents: read | ||
uses: 8hobbies/workflows/.github/workflows/npm-runtime.yml@c95f86bbd0d7f9f7fb4866b1edd66c3972219e80 |
This PR contains the following updates:
48a7222
->c95f86b
Configuration
📅 Schedule: Branch creation - "on Sunday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.