Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ name: ci

jobs:
lint-unit:
uses: sous-chefs/.github/.github/workflows/[email protected].5
uses: sous-chefs/.github/.github/workflows/[email protected].7
permissions:
actions: write
checks: write
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/conventional-commits.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,4 +11,4 @@

jobs:
conventional-commits:
uses: sous-chefs/.github/.github/workflows/[email protected].5
uses: sous-chefs/.github/.github/workflows/[email protected].7

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 11 days ago

To fix this issue, you should add a permissions block to the workflow. The block can be added at the root level (applies to all jobs) or to the specific job. Since this workflow is only invoking a reusable workflow, it is generally sufficient to grant read-only access to repository contents unless the called workflow explicitly requires more (which, based on best practices, is rarely the case for a conventional commits check). Therefore, you should add a permissions: contents: read block under the top-level keys (after the name: declaration), before the jobs definition, in .github/workflows/conventional-commits.yml. No imports or method definitions are required; this is a YAML config change only.

Suggested changeset 1
.github/workflows/conventional-commits.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -1,5 +1,7 @@
 ---
 name: conventional-commits
+permissions:
+  contents: read
 
 "on":
   pull_request:
EOF
@@ -1,5 +1,7 @@
---
name: conventional-commits
permissions:
contents: read

"on":
pull_request:
Copilot is powered by AI and may make mistakes. Always verify output.
Unable to commit as this autofix suggestion is now outdated
2 changes: 1 addition & 1 deletion .github/workflows/prevent-file-change.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,6 @@

jobs:
prevent-file-change:
uses: sous-chefs/.github/.github/workflows/[email protected].5
uses: sous-chefs/.github/.github/workflows/[email protected].7
secrets:
token: ${{ secrets.GITHUB_TOKEN }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ permissions:

jobs:
release:
uses: sous-chefs/.github/.github/workflows/[email protected].5
uses: sous-chefs/.github/.github/workflows/[email protected].7
secrets:
token: ${{ secrets.PORTER_GITHUB_TOKEN }}
supermarket_user: ${{ secrets.CHEF_SUPERMARKET_USER }}
Expand Down
Loading