ci(docs): grant packages read to the docs deploy caller - #24
Merged
Conversation
- ruby-gem-docs-deploy.yml@v5 requests packages: read (bundler pulls fluence-ci-tools from GitHub Packages); a reusable workflow can only receive permissions its caller grants, so every Docs Deploy run has been a startup_failure since the caller was set up — the only caller in the repo missing the grant, and the one difference with fluence-gateway-auth-ruby's working copy
📊 Code Quality Report
✅ No new code-quality findings. 🔍 All 85 reek smells on this PR
📊 Flog complexity breakdown📊 Flay duplication breakdown |
🛡️ Coverage Report: 100.0% (0.0%)
✅ All changes are tested. |
🛡️ Documentation Quality: 100.0% (0.0%)
✅ Documentation quality above threshold. |
🛡️ RuboCop: 0 offenses (0)
✅ No RuboCop offenses. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Every
Docs Deployrun has been astartup_failure(never any log): the reusableruby-gem-docs-deploy.yml@v5declarespermissions: packages: read(bundler pullsfluence-ci-toolsfrom GitHub Packages), and GitHub rejects a reusable workflow at startup when it requests a permission its caller does not grant.docs-deploy.ymlwas the only caller in the repo missingpackages: read— and it is the one difference with fluence-gateway-auth-ruby's working caller.Changes
packages: readto thedocsjob permissions; the merge push tomainwill trigger the deploy and publish the Pages site (v1.0.0, source masqué par docs(yard): hide method source from the published documentation #22)