Skip to content

Commit

Permalink
Merge pull request #1948 from newrelic/upadate-actions-for-release
Browse files Browse the repository at this point in the history
Update permissions for actions
  • Loading branch information
kaylareopelle authored Apr 17, 2023
2 parents 34b3143 + e405ac1 commit 11c2da9
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 3 deletions.
1 change: 1 addition & 0 deletions .github/workflows/label_community_cards.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ on:

permissions:
issues: write
pull-requests: write

jobs:
Check_contributor_handle:
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,9 @@ on:
jobs:
release:
runs-on: ubuntu-latest
permissions:
contents: write

Check failure

Code scanning / Scorecard

Token-Permissions High

score is 0: jobLevel 'contents' permission set to 'write'
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
repository-projects: write
steps:
- uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # tag v3.5.0
with:
Expand Down Expand Up @@ -41,9 +44,6 @@ jobs:
- name: Create github release
uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # tag v0.1.15
if: $(git tag -l ${{ env.VERSION }}) == false
permissions:
contents: write
repository-projects: write
with:
tag_name: ${{ env.VERSION }}
env:
Expand Down

0 comments on commit 11c2da9

Please sign in to comment.