Skip to content

Conversation

@lenucksi
Copy link
Member

Potential fix for https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/6

To fix the problem, add a permissions block to the workflow file at the job or root level, specifying the least privileges required for the workflow to operate. In this case, the workflow reads repository contents and uses gh to create and comment on issues. Therefore, you should set contents: read and issues: write. Place the permissions block at the root level so it applies to all jobs, typically immediately under the name field, before the on: field.

Specific steps:

  • In the file .github/workflows/i18n-consistency-checker.yaml

  • Insert the following block after name: i18n Consistency Check (line 6):

    permissions:
      contents: read
      issues: write

No other code, imports, or settings need to be changed.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants