From f97f191c267387498992272dfe38314cb698fc94 Mon Sep 17 00:00:00 2001 From: Scorcher Date: Mon, 14 Jul 2025 04:20:56 +0800 Subject: [PATCH 1/3] Potential fix for code scanning alert no. 2: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3451e01..9c84552 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -5,6 +5,9 @@ on: push: branches: [main] +permissions: + contents: read + jobs: test: name: Test From 200c6a6add24d8e9b70dc35c1a83a2d0f2dad744 Mon Sep 17 00:00:00 2001 From: Scorcher Date: Mon, 14 Jul 2025 04:25:01 +0800 Subject: [PATCH 2/3] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/deploy.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index e0dfe3d..f2ed923 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -4,6 +4,9 @@ on: push: branches: [main] +permissions: + contents: read + jobs: deploy: runs-on: ubuntu-latest From 5d789af2bcfb4be66056ef45e03042e6efd29917 Mon Sep 17 00:00:00 2001 From: Scorcher Date: Mon, 14 Jul 2025 10:39:49 +0800 Subject: [PATCH 3/3] Update deploy.yml --- .github/workflows/deploy.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index f2ed923..d70230b 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Set up Node.js uses: actions/setup-node@v4