Skip to content

chore: check file permissions on Github Action #1967

chore: check file permissions on Github Action

chore: check file permissions on Github Action #1967

name: Check File Permissions
on:
pull_request:
push:
concurrency:
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
cancel-in-progress: true
permissions:
contents: read
jobs:
permission-check:
name: Check File Permission
runs-on: ubuntu-22.04
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: '8.4'
extensions: intl
coverage: none
- name: Use latest Composer
run: composer self-update
- name: Validate composer.json
run: composer validate --strict
- name: Get composer cache directory
run: echo "COMPOSER_CACHE_FILES_DIR=$(composer config cache-files-dir)" >> $GITHUB_ENV
- name: Cache dependencies
uses: actions/cache@v4
with:
path: ${{ env.COMPOSER_CACHE_FILES_DIR }}
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }}
restore-keys: ${{ runner.os }}-composer-
- name: Install dependencies
run: composer update --ansi --no-interaction
- name: Detect unnecessary execution permissions
run: php utils/check_permission_x.php