-
-
Notifications
You must be signed in to change notification settings - Fork 138
docs: More restrictive permissions #280
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
removed the checkout, not needed |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for proposing this!
changed back to using secrets.GITHUB_TOKEN as requested by owner
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks a lot!
@@ -118,7 +118,7 @@ module.exports = async function run() { | |||
}); | |||
} catch (error) { | |||
throw new Error( | |||
`Pull request has only one commit and it's not semantic; this may lead to a non-semantic commit in the base branch (see https://github.com/community/community/discussions/16271). Amend the commit message to match the pull request title, or add another commit.` | |||
`Pull request has only one commit and it's not semantic; this may lead to a non-semantic commit in the base branch (see https://github.com/community/community/discussions/16271 ). Amend the commit message to match the pull request title, or add another commit.` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
Description
Updated the GitHub Actions workflows to use permissions scope at the job-level (dedicated) instead of workflow level (shared) in case anyone copy-paste and adds some more jobs to the flow.
Updated the url provided in case of a non-compliant commit message, to have it resolved properly.
Type of change
Changes required
How Has This Been Tested?
Permissions block,
-o pipefail
flag, urlfix:ci: validation zMynxx/action-semantic-pull-request#3
Invalid url fix:
before (invalid link):
https://github.com/zMynxx/action-semantic-pull-request/actions/runs/14055509974/job/39354003059#step:6:9
after (valid):
https://github.com/zMynxx/action-semantic-pull-request/actions/runs/14055844489/job/39355025376#step:6:9