Skip to content

Conversation

maticzav
Copy link
Collaborator

This PR changes SDK generator from Stainless to Fern.

Comment on lines +20 to +30
runs-on: ubuntu-latest

- name: Set up Node
uses: actions/setup-node@v4
with:
node-version: '20'
steps:
- name: Checkout repo
uses: actions/checkout@v4

- name: Bootstrap
run: ./scripts/bootstrap
- name: Set up node
uses: actions/setup-node@v3

- name: Run tests
run: ./scripts/test
- name: Compile
run: yarn && yarn test

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 20 days ago

To fix the problem, you should add an explicit permissions key that limits the GITHUB_TOKEN privileges to read-only for repository contents. The best way is to add a root-level permissions block, which applies to all jobs in the workflow unless overridden. This should be placed after the name: and on: entries, before jobs:. No other code changes are required, and there is no functional impact—build and test actions do not require write permissions.

Suggested changeset 1
.github/workflows/ci.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,6 +1,8 @@
 name: ci
 
 on: [push]
+permissions:
+  contents: read
 
 jobs:
   compile:
EOF
@@ -1,6 +1,8 @@
name: ci

on: [push]
permissions:
contents: read

jobs:
compile:
Copilot is powered by AI and may make mistakes. Always verify output.
@maticzav maticzav merged commit 703dd12 into main Sep 1, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant