Skip to content

Specify permissions in GH Action workflows #1500

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 23, 2024

Conversation

oleksandr-pavlyk
Copy link
Contributor

This PR specifies permissions in GitHub Action workflows. Minimal read-all permission is set by default, and specific scope get elevated permission as needed.

This would improve OpenSSF Scorecard value for dpctl

  • Have you provided a meaningful PR description?
  • Have you added a test, reproducer or referred to an issue with a reproducer?
  • Have you tested your changes locally for CPU and GPU devices?
  • Have you made sure that new changes do not introduce compiler warnings?
  • Have you checked performance impact of proposed changes?
  • If this PR is a work in progress, are you opening the PR as a draft?

This would improve OpenSSF Scorecard value for dpctl
@oleksandr-pavlyk oleksandr-pavlyk changed the title Specify permissons in GH Action workflows Specify permissions in GH Action workflows Jan 23, 2024
Copy link

@coveralls
Copy link
Collaborator

coveralls commented Jan 23, 2024

Coverage Status

coverage: 90.684%. remained the same
when pulling e8a15dc on workflow-permissions
into 114b2b1 on master.

Copy link

Array API standard conformance tests for dpctl=0.15.1dev3=py310h15de555_17 ran successfully.
Passed: 903
Failed: 6
Skipped: 86

@oleksandr-pavlyk oleksandr-pavlyk marked this pull request as ready for review January 23, 2024 18:24
@oleksandr-pavlyk oleksandr-pavlyk merged commit 3277028 into master Jan 23, 2024
@oleksandr-pavlyk oleksandr-pavlyk deleted the workflow-permissions branch January 23, 2024 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants