[PR #44] [MERGED] Potential fix for code scanning alert no. 3: Workflow does not contain permissions #51

New issue

Closed

opened 2026-03-02 02:59:32 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 02:59:32 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/buildplan/du_setup/pull/44
Author: @buildplan
Created: 7/23/2025
Status: ✅ Merged
Merged: 7/23/2025
Merged by: @buildplan

Base: main ← Head: alert-autofix-3

📝 Commits (1)

0622540 Potential fix for code scanning alert no. 3: Workflow does not contain permissions

📊 Changes

1 file changed (+3 additions, -0 deletions)

View changed files

📝 .github/workflows/lint.yml (+3 -0)

📄 Description

Potential fix for https://github.com/buildplan/du_setup/security/code-scanning/3

To fix the issue, we will add a permissions block at the root of the workflow file. Since the workflow only needs to read the repository contents (e.g., to lint the shell script), we will set contents: read. This ensures that the workflow has the minimum required permissions and no write access.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/buildplan/du_setup/pull/44 **Author:** [@buildplan](https://github.com/buildplan) **Created:** 7/23/2025 **Status:** ✅ Merged **Merged:** 7/23/2025 **Merged by:** [@buildplan](https://github.com/buildplan) **Base:** `main` ← **Head:** `alert-autofix-3` --- ### 📝 Commits (1) - [`0622540`](https://github.com/buildplan/du_setup/commit/062254046fa728863cef05588d5d46112862ee30) Potential fix for code scanning alert no. 3: Workflow does not contain permissions ### 📊 Changes **1 file changed** (+3 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/lint.yml` (+3 -0) </details> ### 📄 Description Potential fix for [https://github.com/buildplan/du_setup/security/code-scanning/3](https://github.com/buildplan/du_setup/security/code-scanning/3) To fix the issue, we will add a `permissions` block at the root of the workflow file. Since the workflow only needs to read the repository contents (e.g., to lint the shell script), we will set `contents: read`. This ensures that the workflow has the minimum required permissions and no write access. --- _Suggested fixes powered by Copilot Autofix. Review carefully before merging._ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>