Skip to content

Conversation

@fizitzfux
Copy link
Member

No description provided.

RemainingDev and others added 28 commits February 16, 2025 19:45
Merge branch 'main' into remaining
Styling of registration and minecraft page
Correct foreign key references
Fixes #74
Comment on lines +8 to +11
runs-on: ubuntu-latest
steps:
- name: Release Changelog Builder
uses: mikepenz/release-changelog-builder-action@v5

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 7 months ago

To fix the issue, we will add a permissions block at the root of the workflow file. This block will specify the minimal permissions required for the Generate-Changelog job. Based on the functionality of the mikepenz/release-changelog-builder-action, the job likely only needs contents: read to access repository content and generate a changelog. We will add this block to ensure the workflow adheres to the principle of least privilege.


Suggested changeset 1
.github/workflows/changelog.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -5,2 +5,5 @@
 
+permissions:
+  contents: read
+
 jobs:
EOF
@@ -5,2 +5,5 @@

permissions:
contents: read

jobs:
Copilot is powered by AI and may make mistakes. Always verify output.
@fizitzfux fizitzfux merged commit 6eb6c40 into 4.0 Jun 10, 2025
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants