Skip to content

Conversation

maticzav
Copy link
Collaborator

@maticzav maticzav commented Sep 2, 2025

This PR changes Stainless to Fern.

fern-api bot and others added 3 commits September 2, 2025 09:38
* SDK regeneration

* stash

---------

Co-authored-by: fern-api <115122769+fern-api[bot]@users.noreply.github.com>
Co-authored-by: Matic Zavadlal <[email protected]>
Comment on lines +22 to +37
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4

- name: Install Rye
- name: Checkout repo
uses: actions/checkout@v4
- name: Set up python
uses: actions/setup-python@v4
with:
python-version: 3.8
- name: Bootstrap poetry
run: |
curl -sSf https://rye.astral.sh/get | bash
echo "$HOME/.rye/shims" >> $GITHUB_PATH
env:
RYE_VERSION: '0.44.0'
RYE_INSTALL_OPTION: '--yes'

- name: Bootstrap
run: ./scripts/bootstrap
curl -sSL https://install.python-poetry.org | python - -y --version 1.5.1
- name: Install dependencies
run: poetry install

- name: Run tests
run: ./scripts/test
- name: Test
run: poetry run pytest -rP .

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 18 days ago

To fix the problem, explicitly specify the minimal required permissions for the workflow or for each job by adding a permissions block. For these jobs, contents: read is sufficient, as none of the actions require write access to the repository or other resource types. The most concise and maintainable method is to add a top-level permissions block immediately after the name and before on, which will apply the permission restriction to all jobs unless overridden.
Edit .github/workflows/ci.yml to insert:

permissions:
  contents: read

after the name: ci line and before on: [push]. No other code or dependencies are needed.

Suggested changeset 1
.github/workflows/ci.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,4 +1,6 @@
 name: ci
+permissions:
+  contents: read
 
 on: [push]
 jobs:
EOF
@@ -1,4 +1,6 @@
name: ci
permissions:
contents: read

on: [push]
jobs:
Copilot is powered by AI and may make mistakes. Always verify output.
@maticzav maticzav merged commit a10e9b8 into main Sep 2, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant