Skip to content

Commit 1982dac

Browse files
authored
Define token permissions in "Autoupdate pre-commit" workflow (#2591)
The PR adds missing permission definition for "Autoupdate pre-commit" workflow which impacts OpenSSF scope.
1 parent 222b50f commit 1982dac

File tree

2 files changed

+8
-0
lines changed

2 files changed

+8
-0
lines changed

.github/workflows/pre-commit-autoupdate.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,20 @@ on:
88
schedule:
99
- cron: '28 2 * * 6' # Saturday at 02:28 UTC
1010

11+
permissions: read-all
12+
1113
jobs:
1214
autoupdate:
1315
name: Autoupdate
1416

1517
runs-on: ubuntu-latest
1618
timeout-minutes: 10
1719

20+
permissions:
21+
# Needed to create a PR with autoupdate changes
22+
contents: write
23+
pull-requests: write
24+
1825
steps:
1926
- name: Checkout DPNP repo
2027
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
6565
* Resolved `conda build --test` issue in python 3.9 environment [#2583](https://github.com/IntelPython/dpnp/pull/2583)
6666
* Fixed tests for the rounding functions to depend on minimum required numpy version [#2589](https://github.com/IntelPython/dpnp/pull/2589)
6767
* Fixed tests for the ufuncs to depend on minimum required numpy version [#2590](https://github.com/IntelPython/dpnp/pull/2590)
68+
* Added missing permission definition in `Autoupdate pre-commit` GitHub workflow [#2591](https://github.com/IntelPython/dpnp/pull/2591)
6869

6970
### Security
7071

0 commit comments

Comments
 (0)