From 0ccfd287fb6ea87f570b191a3c87709c1e7f8bee Mon Sep 17 00:00:00 2001 From: Alex Wichmann Date: Thu, 12 Jun 2025 14:45:51 +0200 Subject: [PATCH 1/3] Potential fix for code scanning alert no. 8: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Alex Wichmann --- .github/workflows/release-package.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml index 84e9ec9..28d87b2 100644 --- a/.github/workflows/release-package.yml +++ b/.github/workflows/release-package.yml @@ -2,6 +2,10 @@ name: Publish NuGet package on: workflow_dispatch: +permissions: + contents: read + packages: write + jobs: prereleaseCheck: runs-on: ubuntu-latest From 81cd1fd037de0af143d2bb69a3ec145631d3e24d Mon Sep 17 00:00:00 2001 From: Alex Wichmann Date: Thu, 12 Jun 2025 14:47:04 +0200 Subject: [PATCH 2/3] Potential fix for code scanning alert no. 7: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Alex Wichmann --- .github/workflows/release-beta.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release-beta.yml b/.github/workflows/release-beta.yml index 5aba9b5..3b50d07 100644 --- a/.github/workflows/release-beta.yml +++ b/.github/workflows/release-beta.yml @@ -1,7 +1,9 @@ name: Publish beta NuGet package on: workflow_dispatch: - +permissions: + contents: read + packages: write jobs: check: runs-on: ubuntu-latest From 595685bff56e3cb6179b26857b6bfea8da5fe98e Mon Sep 17 00:00:00 2001 From: Alex Wichmann Date: Thu, 12 Jun 2025 14:48:31 +0200 Subject: [PATCH 3/3] Delete .github/workflows/labeler.yaml Signed-off-by: Alex Wichmann --- .github/workflows/labeler.yaml | 14 -------------- 1 file changed, 14 deletions(-) delete mode 100644 .github/workflows/labeler.yaml diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml deleted file mode 100644 index 680f9d1..0000000 --- a/.github/workflows/labeler.yaml +++ /dev/null @@ -1,14 +0,0 @@ -name: "Pull Request Labeler" -on: -- pull_request_target - -jobs: - triage: - permissions: - contents: read - pull-requests: write - runs-on: ubuntu-latest - steps: - - uses: actions/labeler@v4 - with: - repo-token: "${{ secrets.GITHUB_TOKEN }}" \ No newline at end of file