chore: add coverallsapp/github-action@v2 (jobs.test-node.steps.uses)

chore: (jobs.release.permissions) chore: add coverallsapp/github-action@v2 (jobs.finish.steps.uses) chore: (permissions)
arlac77 · Feb 3, 2024 · f8c538a · f8c538a
1 parent 1ac7dd7
commit f8c538a
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -25,7 +25,7 @@ jobs:
       - run: npm ci
       - run: npm run cover --if-present
       - name: Coveralls Parallel
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@v2
         continue-on-error: true
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -50,14 +50,21 @@ jobs:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PKGBUILD_PUBLISH: ${{ secrets.PKGBUILD_PUBLISH }}
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      id-token: write
   finish:
     needs:
       - test-node
     runs-on: ubuntu-latest
     steps:
       - name: Coveralls Finished
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@v2
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: build/coverage/lcov.info
           parallel-finished: true
+permissions:
+  contents: read