Skip to content

Commit c94d6ef

Browse files
Potential fix for code scanning alert no. 55: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 4a4ba6b commit c94d6ef

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

.github/workflows/integration.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Integration Tests 🧪
2+
permissions:
3+
contents: read
24
on:
35
workflow_call:
46
workflow_dispatch:
@@ -277,6 +279,8 @@ jobs:
277279
# First conflicting deployment
278280
integration-rebase-conflicts-1:
279281
needs: integration-branch-creation
282+
permissions:
283+
contents: write
280284
runs-on: ubuntu-latest
281285
steps:
282286
- name: Checkout
@@ -299,6 +303,8 @@ jobs:
299303
# Second conflicting deployment
300304
integration-rebase-conflicts-2:
301305
needs: integration-rebase-conflicts-1
306+
permissions:
307+
contents: write
302308
runs-on: ubuntu-latest
303309
steps:
304310
- name: Checkout
@@ -321,6 +327,8 @@ jobs:
321327
# Clean up conflicting deployments
322328
integration-rebase-conflicts-cleanup:
323329
needs: [integration-rebase-conflicts-1, integration-rebase-conflicts-2]
330+
permissions:
331+
contents: write
324332
runs-on: ubuntu-latest
325333
steps:
326334
- name: Cleanup Generated Branch
@@ -333,6 +341,8 @@ jobs:
333341

334342
integration-root-folder:
335343
needs: integration-rebase-conflicts-cleanup
344+
permissions:
345+
contents: write
336346
runs-on: ubuntu-latest
337347
steps:
338348
- name: Checkout
@@ -363,6 +373,8 @@ jobs:
363373
# Deploys using Git LFS support for large files.
364374
integration-lfs:
365375
needs: integration-root-folder
376+
permissions:
377+
contents: write
366378
runs-on: ubuntu-latest
367379
steps:
368380
- name: Checkout

0 commit comments

Comments
 (0)