Skip to content

Conversation

@StuartFerguson
Copy link
Member

closes #199

Comment on lines 161 to 237

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 5 months ago

To fix the issue, add the permissions key to the workflow file to explicitly limit the permissions of the GITHUB_TOKEN. This ensures that the workflow only has the minimum privileges required to perform its tasks.

In this specific workflow:

  • contents: read is likely sufficient for reading files from the repository.
  • Additional permissions (e.g., actions: write or pull-requests: write) should only be added if required for specific jobs.

The permissions key can be added at the root level of the workflow to apply to all jobs or at the job level to customize permissions for each job.


Suggested changeset 1
.github/workflows/createrelease.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/createrelease.yml b/.github/workflows/createrelease.yml
--- a/.github/workflows/createrelease.yml
+++ b/.github/workflows/createrelease.yml
@@ -4,6 +4,9 @@
   release:
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
   buildlinux:
     name: "Release"
EOF
@@ -4,6 +4,9 @@
release:
types: [published]

permissions:
contents: read

jobs:
buildlinux:
name: "Release"
Copilot is powered by AI and may make mistakes. Always verify output.
@StuartFerguson StuartFerguson merged commit 014df2e into master Jul 3, 2025
8 checks passed
@github-actions github-actions bot deleted the task/#199_linux_release_workflow branch September 2, 2025 00:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Create Linux Install workflow

2 participants