update rc based on master branch changes #2178
Conversation
Rc v4.0.0
Rc v4.0.2
Rc v4.0.2
#2106 fix issue in metadata form showing package usages that have mor…
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| runs-on: windows-latest | ||
|
|
||
| steps: | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: Install .NET SDK | ||
| uses: actions/setup-dotnet@v3 | ||
| with: | ||
| dotnet-version: '8.x' | ||
|
|
||
| - name: Install .NET Upgrade Assistant | ||
| run: dotnet tool install -g upgrade-assistant | ||
|
|
||
| - name: Run Upgrade Assistant in analyze mode | ||
| run: | | ||
| upgrade-assistant analyze BExIS%2B%2B.sln --format json > upgrade-report.json | ||
|
|
||
| - name: Upload report artifact | ||
| uses: actions/upload-artifact@v3.1.3 | ||
| with: | ||
| name: upgrade-report | ||
| path: upgrade-report.json |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 5 months ago
To fix this problem, we should explicitly add a permissions section specifying minimum required permissions. The minimal sufficient permission for this workflow, since it only checks out source code and uploads an artifact, is contents: read. This can be set either at the workflow level (applies to all jobs) or at the job level (applies only to that job). Since there's only one job, either is technically correct, but setting it at the workflow root just after the name or on: block is clean and applies to future jobs as well.
- Add a
permissions:block at the workflow level, just after theon:block and before thejobs:block. - The contents of the block should be:
permissions: contents: read
No new methods, imports, or definitions are required. Only the .github/workflows/main.yml file is to be edited.
| @@ -5,6 +5,9 @@ | ||
| - '**/*.sln' | ||
| workflow_dispatch: | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| upgrade-check: | ||
| runs-on: windows-latest |
No description provided.