Fix Token-Permissions OpenSSF remarks#655
Conversation
There was a problem hiding this comment.
💡 Codex Review
parallel_programming_course/.github/workflows/main.yml
Lines 38 to 41 in 43ae338
The Windows job similarly keeps the token at the default contents read-only scope, but the called workflow uploads the compiled package and downloads it in later steps via artifact actions. These operations require the actions permission; without it the artifact transfer fails and the Windows tests cannot execute.
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
5201013 to
07b0a18
Compare
07b0a18 to
35155ce
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #655 +/- ##
=======================================
Coverage 94.81% 94.81%
=======================================
Files 15 15
Lines 482 482
Branches 167 167
=======================================
Hits 457 457
Partials 25 25 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
No description provided.