Skip to content

Conversation

@Tr01ler
Copy link
Contributor

@Tr01ler Tr01ler commented Feb 25, 2025

yeah

renatodellosso and others added 30 commits January 13, 2025 15:49
…/eslint-9.18.0

[npm]: Bump eslint from 9.17.0 to 9.18.0
Comment on lines +12 to +37
runs-on: ubuntu-latest
if:
steps:
- name: Checkout
uses: actions/checkout@v4
with:
ref: ${{ github.head_ref }} # We need to checkout the head branch, not the temporary merge branch
persist-credentials: false

- name: Setup Node.js environment
uses: actions/[email protected]

- name: Set name
run: git config user.name "Gearbox Bot"

- name: Set email
run: git config user.email "[email protected]"

- name: Increment patch number
run: npm version patch

- name: Push changes
uses: ad-m/[email protected]
with:
github_token: ${{ secrets.GIT_PUSH_TOKEN }}
branch: ${{ github.head_ref }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Comment on lines +30 to +33
- name: Increment patch number
run: npm version patch

- name: Push changes

Check failure

Code scanning / CodeQL

Checkout of untrusted code in a privileged context Critical

Potential execution of untrusted code on a privileged workflow (
pull_request_target
)
Comment on lines +15 to +20
needs:
- ci
uses: ./.github/workflows/cd.yml
secrets:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
@Tr01ler Tr01ler merged commit d82f169 into Move-InsightsAndSettings-Logic-to-component Feb 25, 2025
11 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants