Skip to content

Add default permissions to "Schedule Monthly" and "WR Schedule Monthly" workflows#8611

Merged
t-will-gillis merged 1 commit intohackforla:gh-pagesfrom
t-will-gillis:spec-default-permissions-8591
Apr 11, 2026
Merged

Add default permissions to "Schedule Monthly" and "WR Schedule Monthly" workflows#8611
t-will-gillis merged 1 commit intohackforla:gh-pagesfrom
t-will-gillis:spec-default-permissions-8591

Conversation

@t-will-gillis
Copy link
Copy Markdown
Member

@t-will-gillis t-will-gillis commented Apr 11, 2026

Fixes #8591

What changes did you make?

  • Specified the minimum required permissions for the "Schedule Monthly" and "WR Schedule Monthly" workflow YML files via a top-level permissions: block

Why did you make the changes (we will use this info to test)?

  • To align with GitHub security best practices and ensure that workflows have only the minimum needed permissions by default

CodeQL Alerts

After the PR has been submitted and the resulting GitHub actions/checks have been completed, developers should check the PR for CodeQL alert annotations.

Check the PR's comments. If present on your PR, the CodeQL alert looks similar as shown

Screenshot 2024-10-28 154514

Please let us know that you have checked for CodeQL alerts. Please do not dismiss alerts.

  • I have checked this PR for CodeQL alerts and none were found.
  • I found CodeQL alert(s), and (select one):
    • I have resolved the CodeQL alert(s) as noted
    • I believe the CodeQL alert(s) is a false positive (Merge Team will evaluate)
    • I have followed the Instructions below, but I am still stuck (Merge Team will evaluate)
Instructions for resolving CodeQL alerts

If CodeQL alert/annotations appear, refer to How to Resolve CodeQL alerts.

In general, CodeQL alerts should be resolved prior to PR reviews and merging

Screenshots of Proposed Changes To The Website (if any, please do not include screenshots of code changes)

  • No visual changes to website
  • test log schedule-monthly.yml
  • test log wr-schedule-monthly.yml

@github-actions
Copy link
Copy Markdown

Want to review this pull request? Take a look at this documentation for a step by step guide!


From your project repository, check out a new branch and test the changes.

git checkout -b t-will-gillis-spec-default-permissions-8591 gh-pages
git pull https://github.com/t-will-gillis/website.git spec-default-permissions-8591

@github-actions github-actions bot added role: back end/devOps Tasks for back-end developers Complexity: Large Feature: Refactor GHA Refactoring GitHub actions to fit latest architectural norms size: 8pt Can be done in 31-48 hours labels Apr 11, 2026
@t-will-gillis
Copy link
Copy Markdown
Member Author

@t-will-gillis t-will-gillis merged commit 28b6733 into hackforla:gh-pages Apr 11, 2026
10 checks passed
@t-will-gillis t-will-gillis deleted the spec-default-permissions-8591 branch April 11, 2026 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Complexity: Large Feature: Refactor GHA Refactoring GitHub actions to fit latest architectural norms role: back end/devOps Tasks for back-end developers size: 8pt Can be done in 31-48 hours

Projects

Development

Successfully merging this pull request may close these issues.

Specify default permissions for schedule-monthly.yml and wr-schedule-monthly.yml

1 participant