add attestations as allowed permission

Signed-off-by: Brian DeHamer <bdehamer@github.com>
rhysd · Apr 30, 2024 · 1f0efe1 · 1f0efe1
1 parent ad005b6
commit 1f0efe1
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 4 deletions.
diff --git a/docs/checks.md b/docs/checks.md
@@ -2000,7 +2000,7 @@ test.yaml:4:14: "write" is invalid for permission for all the scopes. available
   |
 4 | permissions: write
   |              ^~~~~
-test.yaml:11:7: unknown permission scope "check". all available permission scopes are "actions", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
+test.yaml:11:7: unknown permission scope "check". all available permission scopes are "actions", "attestations", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
    |
 11 |       check: write
    |       ^~~~~~

diff --git a/rule_permissions.go b/rule_permissions.go
@@ -2,6 +2,7 @@ package actionlint
 
 var allPermissionScopes = map[string]struct{}{
 	"actions":             {},
+	"attestations":        {},
 	"checks":              {},
 	"contents":            {},
 	"deployments":         {},

diff --git a/testdata/err/permissions_upper_case.out b/testdata/err/permissions_upper_case.out
@@ -1,2 +1,2 @@
-test.yaml:4:3: unknown permission scope "ACTIONS". all available permission scopes are "actions", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
-test.yaml:5:3: unknown permission scope "CHECKS". all available permission scopes are "actions", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
+test.yaml:4:3: unknown permission scope "ACTIONS". all available permission scopes are "actions", "attestations", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
+test.yaml:5:3: unknown permission scope "CHECKS". all available permission scopes are "actions", "attestations", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
diff --git a/testdata/examples/permissions.out b/testdata/examples/permissions.out
@@ -1,3 +1,3 @@
 test.yaml:4:14: "write" is invalid for permission for all the scopes. available values are "read-all" and "write-all" [permissions]
-test.yaml:11:7: unknown permission scope "check". all available permission scopes are "actions", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
+test.yaml:11:7: unknown permission scope "check". all available permission scopes are "actions", "attestations", "checks", "contents", "deployments", "discussions", "id-token", "issues", "packages", "pages", "pull-requests", "repository-projects", "security-events", "statuses" [permissions]
 test.yaml:13:15: "readable" is invalid for permission of scope "issues". available values are "read", "write" or "none" [permissions]