-
Notifications
You must be signed in to change notification settings - Fork 14
Rdkemw 4778: Test #352
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
Rdkemw 4778: Test #352
Changes from 34 commits
e7f8a19
8eb747a
16f5463
c8625e9
921fb95
e1b06b9
66a51f2
6bc4e69
6c99d70
c964491
2d9d0fd
4194158
b6ef3ab
c6dbc97
58e0feb
342a40c
3be66b7
1c678d7
2ba1fac
a23b580
12e138d
7058ff5
94d3bc9
ce89686
cd12c08
9a83db3
bc66676
f378f73
5bd8f06
fe848b4
360b26b
ea6f890
dcf58b7
89dbd05
0191d2c
f6712dc
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
@@ -0,0 +1,24 @@ | ||||||||||||||||||||||||||||||||
name: Auto PR Creation Caller | ||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||
on: | ||||||||||||||||||||||||||||||||
pull_request: | ||||||||||||||||||||||||||||||||
types: [closed] | ||||||||||||||||||||||||||||||||
branches: | ||||||||||||||||||||||||||||||||
- test_develop | ||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||
jobs: | ||||||||||||||||||||||||||||||||
debug_check: | ||||||||||||||||||||||||||||||||
runs-on: ubuntu-latest | ||||||||||||||||||||||||||||||||
steps: | ||||||||||||||||||||||||||||||||
- run: echo "Triggered" | ||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||
call_auto_pr_workflow: | ||||||||||||||||||||||||||||||||
#secrets: | ||||||||||||||||||||||||||||||||
#RDKCM_RDKE: ${{ secrets.RDKCM_RDKE }} | ||||||||||||||||||||||||||||||||
uses: rdkcentral/build_tools_workflows/.github/workflows/auto_pr_creation_meta.yml@RDKEMW-4778 | ||||||||||||||||||||||||||||||||
secrets: | ||||||||||||||||||||||||||||||||
RDKCM_RDKE: ${{ secrets.RDKCM_RDKE }} | ||||||||||||||||||||||||||||||||
#runs-on: ubuntu-latest | ||||||||||||||||||||||||||||||||
#steps: | ||||||||||||||||||||||||||||||||
# - name: Print placeholder instead of actual logic | ||||||||||||||||||||||||||||||||
# run: echo "This is a placeholder for the actual logic." | ||||||||||||||||||||||||||||||||
Comment on lines
+18
to
+24
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI 2 months ago To fix the issue, we should add a
The permissions block can be added at the workflow level (to apply to all jobs) or at the job level (to be specific to individual jobs). In this case, adding the permissions block at the workflow level ensures all jobs in the workflow inherit these minimal permissions.
Suggested changeset
1
.github/workflows/auto_pr_creation_target_repo_caller.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 2 months ago
To fix the issue, add an explicit
permissions
block to the workflow. Since thedebug_check
job only echoes a message, it requires minimal permissions (e.g.,contents: read
). Thecall_auto_pr_workflow
job involves calling an external workflow and using secrets, which might require additional permissions, such ascontents: read
andpull-requests: write
. These permissions should be set to the least privilege necessary for the tasks.