Skip to content

fix: fix perms for validate pr title and ossf scorecard #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Lstedmanfalls merged 12 commits into from
Aug 13, 2025
Merged

fix: fix perms for validate pr title and ossf scorecard #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
23c7a2b
fix: fix perms for semver release
Lstedmanfalls Aug 13, 2025
f44e222
fix: fix token
Lstedmanfalls Aug 13, 2025
19be3e9
fix: remove top level perms from workflows
Lstedmanfalls Aug 13, 2025
3c5399a
fix: add content read to validate pr title
Lstedmanfalls Aug 13, 2025
e978192
fix: remove gh token from reusbale workflow
Lstedmanfalls Aug 13, 2025
37eeef1
fix: change to on pr
Lstedmanfalls Aug 13, 2025
0b5cda0
fix: try adding token again
Lstedmanfalls Aug 13, 2025
0d67cd9
fix: put perms on workflow also
Lstedmanfalls Aug 13, 2025
c54c927
fix: try perms at top level
Lstedmanfalls Aug 13, 2025
a1a01d6
fix: try perms at top of workflow file
Lstedmanfalls Aug 13, 2025
9b2c078
chore: remove perm, wont work not on main
Lstedmanfalls Aug 13, 2025
c424b2a
chore: add back env for semver
Lstedmanfalls Aug 13, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions .github/workflows/check-community-approval.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@

name: check-community-approval
on: workflow_call
permissions:
contents: read

jobs:
check-community-approval:
Expand Down
2 changes: 0 additions & 2 deletions .github/workflows/check-pr-thumbs-up.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@

name: check-pr-thumbs-up
on: workflow_call
permissions:
contents: read

jobs:
check-pr-thumbs-up:
Expand Down
3 changes: 1 addition & 2 deletions .github/workflows/ossf-scorecard.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,10 @@
# Required Permissions:
# contents: read
# security-events: write
# id-token: write

name: ossf-scorecard
on: workflow_call
permissions:
contents: read

jobs:
ossf-scorecard:
Expand Down
2 changes: 0 additions & 2 deletions .github/workflows/semver-release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@

name: semver-release
on: workflow_call
permissions:
contents: read

jobs:
semver-release:
Expand Down
2 changes: 0 additions & 2 deletions .github/workflows/validate-pr-title.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@

name: validate-pr-title
on: workflow_call
permissions:
contents: read

jobs:
validate-pr-title:
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/z_local_ossf-scorecard.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ jobs:
ossf-scorecard:
name: ossf-scorecard
permissions:
contents: read
security-events: write
id-token: write
uses: ./.github/workflows/ossf-scorecard.yaml
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/z_local_validate-pr-title.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ jobs:
validate-pr-title:
name: validate-pr-title
permissions:
contents: read
pull-requests: read
uses: ./.github/workflows/validate-pr-title.yaml
secrets: inherit
Loading