-
Notifications
You must be signed in to change notification settings - Fork 0
main 브랜치 최신화 #13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
main 브랜치 최신화 #13
Changes from all commits
da92359
7c09b92
f060131
22bd224
b98400b
6626292
4f28cf1
765ed7f
aa03037
de9a6b8
0cbe14e
11baac1
ae4fa16
b79caaf
0376d7d
5203bd3
fd24e46
0d8d885
d3cf43e
ddf423c
edc262a
b92096e
3410f39
fb1d5a6
045970a
c137926
3fa5904
c715506
9661698
54c2b6c
344adec
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| # 각 레포지토리의 .github/workflows/assign-issue-creator.yml | ||
|
|
||
| name: Assign issue creator | ||
|
|
||
| on: | ||
| issues: | ||
| types: [opened] | ||
|
|
||
| jobs: | ||
| call-reusable-workflow: | ||
| # @main 은 .github 레포지토리의 main 브랜치를 사용한다는 의미입니다. 버전을 위해 @v1과 같이 태그를 사용하는 것을 권장합니다. | ||
| uses: 33-Auto/.github/.github/workflows/reusable-assign-issue-creator.yml@main | ||
| # 이 워크플로우는 secrets를 전달할 필요가 없지만, 필요 시 아래와 같이 전달합니다. | ||
| # secrets: inherit | ||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,19 @@ | ||||||||||||||||||||||||||||||||
| # 각 레포지토리의 .github/workflows/close-issues-on-dev-merge.yml | ||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||
| name: Auto Close Issues on dev merge | ||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||
| on: | ||||||||||||||||||||||||||||||||
| pull_request: | ||||||||||||||||||||||||||||||||
| types: [closed] | ||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||
| jobs: | ||||||||||||||||||||||||||||||||
| call-reusable-workflow: | ||||||||||||||||||||||||||||||||
| if: > | ||||||||||||||||||||||||||||||||
| github.event.pull_request.merged == true && | ||||||||||||||||||||||||||||||||
| github.event.pull_request.base.ref == 'dev' | ||||||||||||||||||||||||||||||||
| uses: 33-Auto/.github/.github/workflows/reusable-close-linked-issues.yml@main | ||||||||||||||||||||||||||||||||
| # with를 통해 재사용 워크플로우의 inputs에 값을 전달합니다. | ||||||||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||||||||
| pr-body: ${{ github.event.pull_request.body }} | ||||||||||||||||||||||||||||||||
| issue-number: ${{ github.event.pull_request.number }} | ||||||||||||||||||||||||||||||||
| secrets: inherit # 재사용 워크플로우가 GITHUB_TOKEN을 사용할 수 있도록 전달 | ||||||||||||||||||||||||||||||||
|
Comment on lines
+11
to
+19
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI 4 months ago The best fix is to add a
Suggested changeset
1
.github/workflows/close-issues-on-dev-merge.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Refresh and try again.
|
||||||||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -1,13 +1,15 @@ | |||||||||||||||||||||||
| name: PR Reminder | |||||||||||||||||||||||
| name: PR Reminder | |||||||||||||||||||||||
|
|
|||||||||||||||||||||||
| on: | |||||||||||||||||||||||
| schedule: | |||||||||||||||||||||||
| - cron: "0 0,5,8 * * *" # 아침 9시, 오후 2시, 오후 5시에 실행 (UTC 기준으로 설정해서 한국 시간에 맞춤) | |||||||||||||||||||||||
| workflow_dispatch: | |||||||||||||||||||||||
| on: | |||||||||||||||||||||||
| schedule: | |||||||||||||||||||||||
| - cron: "47 23,4,7,8,10 * * *" # 아침 8시 47분, 오후 2시 47분, 오후 4시 47분, 오후 5시 47분, 오후 7시 47분 에 실행 (UTC 기준으로 설정해서 한국 시간에 맞춤) | |||||||||||||||||||||||
| workflow_dispatch: | |||||||||||||||||||||||
|
|
|||||||||||||||||||||||
| jobs: | |||||||||||||||||||||||
| call-reusable-reminder: | |||||||||||||||||||||||
| uses: 33-Auto/.github/.github/workflows/reusable-pr-reminder.yml@main | |||||||||||||||||||||||
| secrets: | |||||||||||||||||||||||
| # 해당 시크릿은 조직의 시크릿에 저장되어 있음 | |||||||||||||||||||||||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |||||||||||||||||||||||
| jobs: | |||||||||||||||||||||||
| call-reusable-reminder: | |||||||||||||||||||||||
| uses: 33-Auto/.github/.github/workflows/reusable-pr-reminder.yml@main | |||||||||||||||||||||||
| secrets: | |||||||||||||||||||||||
| # 해당 시크릿은 조직의 시크릿에 저장되어 있음 | |||||||||||||||||||||||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |||||||||||||||||||||||
| with: | |||||||||||||||||||||||
| SLACK_USER_MAP: ${{ vars.SLACK_USER_MAP }} | |||||||||||||||||||||||
|
Comment on lines
+10
to
+15
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI 4 months ago To fix the problem, add a
Suggested changeset
1
.github/workflows/pr-reminder.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Refresh and try again.
|
|||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,17 @@ | |||||||||||||||||||||||||||||||||||
| # 각 레포지토리의 .github/workflows/request-pr-review.yml | |||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||
| name: PR Assignee & Team Review Request | |||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||
| on: | |||||||||||||||||||||||||||||||||||
| pull_request: | |||||||||||||||||||||||||||||||||||
| types: [opened, reopened, ready_for_review] | |||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||
| jobs: | |||||||||||||||||||||||||||||||||||
| call-reusable-workflow: | |||||||||||||||||||||||||||||||||||
| uses: 33-Auto/.github/.github/workflows/reusable-pr-assign-and-review.yml@main | |||||||||||||||||||||||||||||||||||
| with: | |||||||||||||||||||||||||||||||||||
| team-slug-for-review: "review_avengers" # 여기에 리뷰를 요청할 팀의 slug를 입력합니다. | |||||||||||||||||||||||||||||||||||
| pr-author: ${{ github.event.pull_request.user.login }} | |||||||||||||||||||||||||||||||||||
| pr-number: ${{ github.event.pull_request.number }} | |||||||||||||||||||||||||||||||||||
| secrets: | |||||||||||||||||||||||||||||||||||
| ORGANIZATION_TOKEN: ${{ secrets.ORGANIZATION_TOKEN }} # 재사용 워크플로우가 ORGANIZATION_TOKEN을 사용할 수 있도록 전달 | |||||||||||||||||||||||||||||||||||
|
Comment on lines
+11
to
+17
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI 4 months ago To fix the problem, an explicit No new imports or definitions are required. Only the addition of a small YAML block is necessary.
Suggested changeset
1
.github/workflows/request-pr-review.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Refresh and try again.
|
|||||||||||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,20 @@ | ||||||||||||||||||||
| name: Trigger Infra CD | ||||||||||||||||||||
|
|
||||||||||||||||||||
| on: | ||||||||||||||||||||
| push: | ||||||||||||||||||||
| branches: | ||||||||||||||||||||
| - main | ||||||||||||||||||||
|
|
||||||||||||||||||||
| jobs: | ||||||||||||||||||||
| trigger-infra: | ||||||||||||||||||||
| runs-on: ubuntu-latest | ||||||||||||||||||||
| steps: | ||||||||||||||||||||
| - name: Trigger infra repo deploy workflow | ||||||||||||||||||||
| uses: peter-evans/repository-dispatch@v3 | ||||||||||||||||||||
| with: | ||||||||||||||||||||
| token: ${{ secrets.ORGANIZATION_TOKEN }} | ||||||||||||||||||||
| # [중요] 아래 repository 값은 모든 앱이 공유하는 '중앙 인프라 리포지토리' 주소이다. | ||||||||||||||||||||
| repository: 33-Auto/Sampoom-Management-Infra | ||||||||||||||||||||
| event-type: deploy | ||||||||||||||||||||
| # 'Sampoom-Management-Backend-Part'은 스크립트가 동적으로 치환할 자리표시자(placeholder)이다. | ||||||||||||||||||||
| client-payload: '{"service":"Sampoom-Management-Backend-Part","branch":"main"}' | ||||||||||||||||||||
|
Comment on lines
+10
to
+20
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI 4 months ago To address this issue, add an explicit Steps:
Suggested changeset
1
.github/workflows/trigger_infra.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Refresh and try again.
|
||||||||||||||||||||
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 4 months ago
The best way to fix this issue is to explicitly set a
permissionsblock at the workflow or job level in.github/workflows/assign-issue-creator.yml, restricting the GitHub token's access to only what is necessary. Since this workflow does not run its own steps (only calls a reusable workflow), the minimal reasonable permissions for it would becontents: read, unless further write permissions are required by the reusable workflow and not inherited. To be safe and general, apply thepermissionsblock at the top level (immediately belownameand beforeon), as this will apply to all jobs unless overridden. No additional imports, methods, or definitions are required—just an edit to the YAML file.