Skip to content

Conversation

austenstone
Copy link
Owner

This PR contains autofixes for 18 code scanning alerts from GitHub Advanced Security.

The following alerts were fixed:

Alert # Rule ID Description Severity File Line Message
#18 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 69 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#17 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 59 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#16 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 50 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#15 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 42 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#14 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 35 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#13 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 29 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#12 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 24 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#11 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/build-test-deploy.yml 12 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#10 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 14 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#9 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.yml 8 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#8 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.terraform.yml 21 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
#7 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.test.yml 13 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
#6 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.docker.yml 53 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
#5 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.lint.yml 8 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
#4 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.docker.yml 28 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
#3 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.build.yml 17 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
#2 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.azure.web.static.deploy.yml 16 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
#1 actions/missing-workflow-permissions Workflow does not contain permissions medium .github/workflows/angular.azure.web.app.deploy.yml 16 Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}

Please review the changes before merging.

austenstone and others added 28 commits July 3, 2025 18:54
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Austen Stone <austenstone@github.com>
@austenstone austenstone merged commit 1b966ef into main Jul 3, 2025
5 checks passed
@austenstone austenstone deleted the autofixes branch July 3, 2025 22:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant