-
Notifications
You must be signed in to change notification settings - Fork 7
merge develop into master #18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Update Makefile (app flags)
[fix] compatibility with IO revamped SDK.
Bump version for IO revamp
| name: Call Ledger guidelines_enforcer | ||
| uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_guidelines_enforcer.yml@v1 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 5 months ago
To fix the issue, add a permissions block to the workflow. This block should specify the least privileges required for the workflow to function correctly. Since the workflow calls a reusable workflow, it is likely that only contents: read permissions are needed to access the repository contents. If additional permissions are required (e.g., pull-requests: write), they should be added explicitly.
The permissions block can be added at the root level of the workflow to apply to all jobs or within the specific job (guidelines_enforcer) to limit permissions for that job only.
-
Copy modified lines R23-R24
| @@ -22,2 +22,4 @@ | ||
| name: Call Ledger guidelines_enforcer | ||
| permissions: | ||
| contents: read | ||
| uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_guidelines_enforcer.yml@v1 |
No description provided.