-
-
Notifications
You must be signed in to change notification settings - Fork 558
chore(deps): update sous-chefs/.github action to v5.0.8 #816
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
| jobs: | ||
| conventional-commits: | ||
| uses: sous-chefs/.github/.github/workflows/[email protected].5 | ||
| uses: sous-chefs/.github/.github/workflows/[email protected].8 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 5 days ago
To fix the issue, we should explicitly add a permissions block to the workflow file to limit the permissions of the GITHUB_TOKEN to the minimum required. Since the job runs a reusable workflow (sous-chefs/.github/.github/workflows/[email protected]), it is best practice to restrict top-level permissions in the calling workflow, unless more write permissions are required for functionality. As a safe default when uncertain, grant only read access to contents. The correct place for this is at the top level of the workflow file (alongside name and on), so that all jobs without their own permissions block will inherit these restricted permissions.
-
Copy modified lines R3-R4
| @@ -1,5 +1,7 @@ | ||
| --- | ||
| name: conventional-commits | ||
| permissions: | ||
| contents: read | ||
|
|
||
| "on": | ||
| pull_request: |
Slowest examplesTop 10 slowest examples (0.01 seconds, 50.15% of total time)
|
This PR contains the following updates:
5.0.5->5.0.8Release Notes
sous-chefs/.github (sous-chefs/.github)
v5.0.8Compare Source
Full Changelog: sous-chefs/.github@5.0.7...5.0.8
v5.0.7Compare Source
More Slack fixes
v5.0.6Compare Source
Make Slack inputs optional
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.