Skip to content

Potential fix for code scanning alert no. 55: Workflow does not contain permissions#631

Merged
andykenward merged 1 commit into
mainfrom
alert-autofix-55
Sep 20, 2025
Merged

Potential fix for code scanning alert no. 55: Workflow does not contain permissions#631
andykenward merged 1 commit into
mainfrom
alert-autofix-55

Conversation

@andykenward

Copy link
Copy Markdown
Owner

Potential fix for https://github.com/andykenward/github-actions-cloudflare-pages/security/code-scanning/55

To fix this issue, add a permissions block at the top level of the workflow file (.github/workflows/check-dist.yml), right after the name: field and before the on: field. This block should specify the minimal permissions required for the workflow, which in this case is likely just contents: read. None of the workflow steps appear to modify repository content, interact with issues, or require write access anywhere outside artifact upload (which does not require repository write permissions). No imports or other changes are needed; just add the following block:

permissions:
  contents: read

Add this block after name: check dist (line 8).

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

…in permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@changeset-bot

changeset-bot Bot commented Sep 18, 2025

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 69282ad

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@andykenward andykenward marked this pull request as ready for review September 18, 2025 17:39
@andykenward andykenward merged commit ed0caed into main Sep 20, 2025
7 of 8 checks passed
@andykenward andykenward deleted the alert-autofix-55 branch September 20, 2025 15:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant