Potential fix for code scanning alert no. 8: Workflow does not contain permissions#123
Potential fix for code scanning alert no. 8: Workflow does not contain permissions#123levibostian merged 1 commit intomainfrom
Conversation
…cript Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
decafRunning deployments in test mode. Results will appear below. ...🟩 squash 🟩 merge method... 🌴 It will not trigger a deployment. No new version will be deployed. Learn moreLatest release: 0.9.1 Commit of latest release: 2e7f982 Commits since last release: - Potential fix for code scanning alert no. 8: Workflow does not contain permissions Potential fix for https://github.com/levibostian/decaf/security/code-scanning/8 To fix the problem, explicitly set minimal Concretely, edit Suggested fixes powered by Copilot Autofix. Review carefully before merging. ...🟩 rebase 🟩 merge method... 🌴 It will not trigger a deployment. No new version will be deployed. Learn moreLatest release: 0.9.1 Commit of latest release: 2e7f982 Commits since last release: - add permissions block to github action workflow for testing install script Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> |
Pull Request Test Coverage Report for Build 20783072626Details
💛 - Coveralls |
Potential fix for https://github.com/levibostian/decaf/security/code-scanning/8
To fix the problem, explicitly set minimal
permissionsfor thetest-install-scriptjob so it does not inherit potentially broad repository defaults. This job only checks out the repository and runs a local install and verification script, so it only needs read access to the repository contents.Concretely, edit
.github/workflows/tests.ymlin thetest-install-scriptjob definition, right underruns-on: ubuntu-latest, and add apermissionsblock withcontents: read, mirroring the existingtestjob. No other functionality, steps, or actions need to change, and no imports or external dependencies are required.Suggested fixes powered by Copilot Autofix. Review carefully before merging.