Skip to content

Conversation

@CorentinGS
Copy link
Owner

Potential fix for https://github.com/CorentinGS/chess/security/code-scanning/5

To address this issue, a permissions block should be added to the workflow file. It can either be defined at the root level (applying to all jobs) or at the individual job level (customized for each job). Since the workflow contains multiple jobs, using job-specific permissions blocks provides greater control and flexibility.

The following permissions are recommended:

  • For jobs that only need to read repository contents (e.g., test, vulncheck, report-card), set contents: read.
  • For jobs requiring write access (e.g., changelog), set only the required type of write permissions, such as pull-requests: write.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@CorentinGS CorentinGS marked this pull request as ready for review July 7, 2025 08:35
@codecov
Copy link

codecov bot commented Jul 7, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 67.49%. Comparing base (87b468c) to head (caca167).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #48   +/-   ##
=======================================
  Coverage   67.49%   67.49%           
=======================================
  Files          27       27           
  Lines        4608     4608           
=======================================
  Hits         3110     3110           
  Misses       1374     1374           
  Partials      124      124           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@CorentinGS CorentinGS merged commit a2eb986 into main Jul 7, 2025
11 checks passed
@CorentinGS CorentinGS deleted the alert-autofix-5 branch September 18, 2025 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants