Skip to content

Authenticate the update workflow#133

Merged
grahamc merged 1 commit intomainfrom
push-lppoxssnyqml
Jan 28, 2026
Merged

Authenticate the update workflow#133
grahamc merged 1 commit intomainfrom
push-lppoxssnyqml

Conversation

@grahamc
Copy link
Member

@grahamc grahamc commented Jan 28, 2026

Description

This time with perhaps less hamfistedness.

Checklist
  • Tested changes against a test repository
  • Added or updated relevant documentation (leave unchecked if not applicable)
  • (If this PR is for a release) Updated README to point to the new tag (leave unchecked if not applicable)

Summary by CodeRabbit

  • Chores
    • Updated GitHub Actions workflow permissions configuration with new authorization scopes for the automated downstream update process, enhancing access control and security practices.

✏️ Tip: You can customize this high-level summary in your review settings.

@netlify
Copy link

netlify bot commented Jan 28, 2026

Deploy Preview for detsys-ts-docs ready!

Name Link
🔨 Latest commit 20257de
🔍 Latest deploy log https://app.netlify.com/projects/detsys-ts-docs/deploys/697a48e5c8203f0008e3f3a5
😎 Deploy Preview https://deploy-preview-133--detsys-ts-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@coderabbitai
Copy link

coderabbitai bot commented Jan 28, 2026

Caution

Review failed

The pull request is closed.

📝 Walkthrough

Walkthrough

A permissions block was added to a GitHub Actions workflow job, granting read access to repository contents and write access to OpenID Connect tokens.

Changes

Cohort / File(s) Summary
GitHub Actions Workflow Configuration
.github/workflows/update-downstream.yml
Added permissions block to update-downstream job specifying contents: read and id-token: write access scopes

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested reviewers

  • cole-h

Poem

🐰 A rabbit hops through GitHub's halls,
Permissions granted for the OIDC calls!
Read the contents, token in hand,
Security practices, perfectly planned! 🔐


Comment @coderabbitai help to get the list of available commands and usage tips.

@grahamc grahamc merged commit 09474fc into main Jan 28, 2026
5 of 6 checks passed
@grahamc grahamc deleted the push-lppoxssnyqml branch January 28, 2026 17:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants