Skip to content

Commit

Permalink
chore: add the missing decsktop check
Browse files Browse the repository at this point in the history
  • Loading branch information
jmuelbert committed Nov 9, 2024
1 parent d79952a commit a38ebd1
Showing 1 changed file with 25 additions and 0 deletions.
25 changes: 25 additions & 0 deletions .github/workflows/desktop-file-validate.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
name: Check desktop file

Check failure

Code scanning / Scorecard

Token-Permissions High

score is 0: no topLevel permission defined
Remediation tip: Visit https://app.stepsecurity.io/secureworkflow.
Tick the 'Restrict permissions for GITHUB_TOKEN'
Untick other options
NOTE: If you want to resolve multiple issues at once, you can visit https://app.stepsecurity.io/securerepo instead.
Click Remediation section below for further remediation help

Check failure on line 1 in .github/workflows/desktop-file-validate.yml

View check run for this annotation

Trunk.io / Trunk Check

checkov(CKV2_GHA_1)

[new] Ensure top-level permissions are not set to write-all
"on":
pull_request:
branches: [main]
paths:
- '**.nix'
- .github/workflows/desktop-file-validate.yaml
- flake.lock
- packaging/com.jwillikers.CyrillicEncoder.desktop
push:
branches: [main]
paths:
- '**.nix'
- .github/workflows/desktop-file-validate.yaml
- flake.lock
- packaging/com.jwillikers.CyrillicEncoder.desktop
jobs:
desktop-file-validate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 1: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue
- uses: DeterminateSystems/nix-installer-action@v14

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 1: third-party GitHubAction not pinned by hash
Click Remediation section below to solve this issue
- uses: DeterminateSystems/magic-nix-cache-action@v8

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 1: third-party GitHubAction not pinned by hash
Click Remediation section below to solve this issue
- name: Check the desktop file
run: nix develop --command desktop-file-validate packaging/com.jwillikers.CyrillicEncoder.desktop

0 comments on commit a38ebd1

Please sign in to comment.