Skip to content

Conversation

@rajeevkumar-nr
Copy link
Contributor

No description provided.

Comment on lines +14 to +35
name: Run Tests with Coverage
runs-on: ubuntu-latest

strategy:
matrix:
node-version: ['lts/*']

steps:
- name: Checkout code
uses: actions/checkout@v4

- name: Setup Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v4
with:
node-version: ${{ matrix.node-version }}
cache: 'npm'

- name: Install dependencies
run: npm ci

- name: Run tests with coverage
run: npm test

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium test

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI about 1 month ago

To fix this issue, explicitly declare a permissions block at the most appropriate scope. Since the workflow only reads code and does not require write access, set permissions: contents: read. This can be added at the workflow root (to apply to all jobs) or at the job level (to restrict just this job). Here, add the block at the job level (under test:) for the smallest change, but it is equally correct to do so at the top level. Insert this block directly beneath the name: Run Tests with Coverage line, ensuring no functionality changes. No further imports or definitions are required.


Suggested changeset 1
.github/workflows/test.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,6 +12,8 @@
 jobs:
   test:
     name: Run Tests with Coverage
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
 
     strategy:
EOF
@@ -12,6 +12,8 @@
jobs:
test:
name: Run Tests with Coverage
permissions:
contents: read
runs-on: ubuntu-latest

strategy:
Copilot is powered by AI and may make mistakes. Always verify output.
@rajeevkumar-nr rajeevkumar-nr changed the title sync Stable with master sync master with stable Nov 6, 2025
mlychndnnr
mlychndnnr previously approved these changes Nov 6, 2025
Copy link
Contributor

@mlychndnnr mlychndnnr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

mlychndnnr and others added 4 commits November 9, 2025 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants