-
Notifications
You must be signed in to change notification settings - Fork 12
Release v0.10.10 #588
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Release v0.10.10 #588
Conversation
Bumps [ASFHyP3/actions](https://github.com/asfhyp3/actions) from 0.18.1 to 0.19.0. - [Release notes](https://github.com/asfhyp3/actions/releases) - [Changelog](https://github.com/ASFHyP3/actions/blob/develop/CHANGELOG.md) - [Commits](ASFHyP3/actions@v0.18.1...v0.19.0) --- updated-dependencies: - dependency-name: ASFHyP3/actions dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…3/actions-0.19.0 Bump ASFHyP3/actions from 0.18.1 to 0.19.0
Pulling refs/tags/v0.10.9 into develop
Bumps [ASFHyP3/actions](https://github.com/asfhyp3/actions) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/asfhyp3/actions/releases) - [Changelog](https://github.com/ASFHyP3/actions/blob/develop/CHANGELOG.md) - [Commits](ASFHyP3/actions@v0.19.0...v0.20.0) --- updated-dependencies: - dependency-name: ASFHyP3/actions dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Add content to ARIA GUNW product guide about coverage thresholds and ingesting on-demand products to the archive
Final edits to ARIA S1 GUNW Product Guide
Remove references to 90% coverage threshold
Remove references to ingesting on-demand ARIA GUNW products
…3/actions-0.20.0 Bump ASFHyP3/actions from 0.19.0 to 0.20.0
Co-authored-by: Heidi Kristenson <61886203+hjkristenson@users.noreply.github.com>
Co-authored-by: Heidi Kristenson <61886203+hjkristenson@users.noreply.github.com>
Update AUTORIFT credits
| jobs: | ||
| call-changelog-check-workflow: | ||
| uses: ASFHyP3/actions/.github/workflows/reusable-changelog-check.yml@v0.18.1 | ||
| uses: ASFHyP3/actions/.github/workflows/reusable-changelog-check.yml@v0.20.0 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 8 months ago
To fix the issue, add a permissions block at the root of the workflow file. Since this workflow is only triggering a reusable workflow for a changelog check, it likely only needs contents: read permissions. This ensures that the workflow has the minimal permissions required to function correctly.
-
Copy modified lines R3-R5
| @@ -2,2 +2,5 @@ | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| on: |
| jobs: | ||
| call-labeled-pr-check-workflow: | ||
| uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.18.1 | ||
| uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.20.0 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 8 months ago
To fix the issue, add a permissions block to the workflow to explicitly define the least privileges required for the workflow. Since the workflow interacts with pull requests, it likely requires pull-requests: write. If the reusable workflow requires additional permissions, they should also be included. The permissions block should be added at the root level of the workflow to apply to all jobs unless overridden.
-
Copy modified lines R3-R5
| @@ -2,2 +2,5 @@ | ||
|
|
||
| permissions: | ||
| pull-requests: write | ||
|
|
||
| on: |
| jobs: | ||
| call-secrets-analysis-workflow: | ||
| uses: ASFHyP3/actions/.github/workflows/reusable-secrets-analysis.yml@v0.18.1 | ||
| uses: ASFHyP3/actions/.github/workflows/reusable-secrets-analysis.yml@v0.20.0 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 8 months ago
To fix the issue, add a permissions block to the root of the workflow file. This block should specify the least privileges required for the workflow to function correctly. Since the workflow calls a reusable workflow for secrets analysis, it likely only needs contents: read permissions. If additional permissions are required, they should be added based on the specific needs of the reusable workflow.
-
Copy modified lines R5-R7
| @@ -4,2 +4,5 @@ | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: |
Developer checklist
Reviewer checklist
|
AutoRIFT credit change looks good on the test build of the site:
