feat(linter): add workflow permissions analysis with actions-permissions #684
neilime__pull-request-ci.yml
on: pull_request
Matrix: ci / linter / 🛡️ CodeQL Analysis
ci
/
...
/
🧹 Lint Code Base
1m 37s
ci
/
...
/
prepare-actions-linting
7s
Matrix: ci / linter / 🔐 Workflow Permissions Analysis
ci
/
...
/
📦 Prepare configuration
Matrix: ci / test-action-matrix-outputs / Arrange - Set first output
Waiting for pending jobs
Matrix: ci / test-action-matrix-outputs / Arrange - Set empty output
Waiting for pending jobs
Matrix: ci / test-action-matrix-outputs / Arrange - Set third output
Waiting for pending jobs
ci
/
...
/
Tests for get-github-actions-bot-user action
ci
/
...
/
Tests for get-issue-number action
ci
/
...
/
Tests for parse-ci-reports action
ci
/
...
/
🛡️ CodeQL Analysis
ci
/
...
/
🛡️ Dependency Review
ci
/
...
/
Tests for repository-owner-is-organization action
ci
/
...
/
Tests for slugify action
ci
/
...
/
Tests for working-directory action
Matrix: ci / test-action-matrix-outputs / Assert - Check outputs
Waiting for pending jobs
ci
/
...
/
👕 Lint
ci
/
...
/
🧪 Test
Annotations
1 error and 2 warnings
|
|
|
ci / linter / 🔐 Workflow Permissions Analysis ("Linter")
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: GitHubSecurityLab/actions-permissions/advisor@b25f731bf2f9eb9748c2e9757d366c3e72fa2109. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
ci / linter / 🛡️ CodeQL Analysis (actions)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|