-
-
Notifications
You must be signed in to change notification settings - Fork 559
chore(deps): update sous-chefs/.github action to v5.0.5 #800
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
b8b60e7
to
f22de3f
Compare
74ec6d7
to
9fe3b38
Compare
Pull request was closed
9fe3b38
to
88b742b
Compare
88b742b
to
24b37d0
Compare
jobs: | ||
conventional-commits: | ||
uses: sous-chefs/.github/.github/workflows/conventional-commits.yml@5.0.3 | ||
uses: sous-chefs/.github/.github/workflows/conventional-commits.yml@5.0.5 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI about 4 hours ago
To fix this issue, you must explicitly add a permissions
block at the top-level of the workflow or within the specific job. Since the job simply calls a reusable workflow and does not appear to require any write permissions, the safest minimal permissions would be contents: read
, restricting the GITHUB_TOKEN
to read-only access to repository contents for this workflow run. This change should be added either immediately after the name:
field or as a field at the same level as jobs:
(top-level). No imports or definitions are needed, only the addition of the permissions
block to the YAML.
-
Copy modified lines R3-R4
@@ -1,5 +1,7 @@ | ||
--- | ||
name: conventional-commits | ||
permissions: | ||
contents: read | ||
|
||
"on": | ||
pull_request: |
Slowest examplesTop 10 slowest examples (0.01 seconds, 50.08% of total time)
|
This PR contains the following updates:
5.0.3
->5.0.5
Release Notes
sous-chefs/.github (sous-chefs/.github)
v5.0.5
Compare Source
Add Slack inputs
v5.0.4
Compare Source
Full Changelog: sous-chefs/.github@5.0.3...5.0.4
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.