Skip to content

Conversation

@adamKpark
Copy link
Collaborator

  • Readme: Added some clarifications reflecting the comments by JOSS reviewers.
  • joss/*: Includes all document components used to generate the JOSS paper.
  • workflow/draft-pdf: Triggers the workflow (in Action) that generates a JOSS draft pdf on commit.

Park and others added 15 commits November 12, 2024 14:44
Added missing comma was added that was causing the bib file test fail.
…ki D, Brown CT. 2022. Lightweight compositional analysis of metagenomes with FracMinHash and minimum metagenome covers. bioRxiv 10.1101/2022.01.11.475838 [DOI] per JOSS reviewer request
…ata of a defined microbial mock community." Scientific data 3.1 (2016): 1-8.
Change title by adding "Software for" (refer to JOSS reviewer #137)
added description of what statistical framework is being referred to
readme - Added target audiences and the problem statement at the front, briefly wrote the dependencies.
JOSS/paper.md - figure formatting, references from and within figures and tables, input clarifications.
@codecov
Copy link

codecov bot commented Jan 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.40%. Comparing base (692490c) to head (ea10ad8).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #146   +/-   ##
=======================================
  Coverage   51.40%   51.40%           
=======================================
  Files          11       11           
  Lines        1171     1171           
=======================================
  Hits          602      602           
  Misses        569      569           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Merge branch 'main' into JOSS_paper
Comment on lines +10 to +28
runs-on: ubuntu-latest
name: Paper Draft
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Build draft PDF
uses: openjournals/openjournals-draft-action@master
with:
journal: joss
# This should be the path to the paper within your repo.
paper-path: joss/paper.md
- name: Upload
uses: actions/upload-artifact@v4
with:
name: paper
# This is the output path where Pandoc will write the compiled
# PDF. Note, this should be the same directory as the input
# paper.md
path: joss/paper.pdf No newline at end of file

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 12 days ago

In general, you fix this by explicitly specifying a permissions block in the workflow (either at the top level or per job) to restrict the GITHUB_TOKEN to the minimal scopes required. For this workflow, the steps only read repository contents and upload an artifact; they do not push commits, modify issues, or alter PRs. The minimal and recommended setting is therefore contents: read.

The best fix is to add a root-level permissions block, which will apply to all jobs in this workflow (currently just paper). Insert it just after the name: line and before the on: block. Set contents: read as suggested by CodeQL. No additional imports, methods, or definitions are required because this is just a YAML configuration change.

Concretely:

  • Edit .github/workflows/draft-pdf.yml.
  • After line 1 (name: Draft PDF), insert:
permissions:
  contents: read

This limits the GITHUB_TOKEN in this workflow to read-only access to repository contents, which is sufficient for actions/checkout and the build step.

Suggested changeset 1
.github/workflows/draft-pdf.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/draft-pdf.yml b/.github/workflows/draft-pdf.yml
--- a/.github/workflows/draft-pdf.yml
+++ b/.github/workflows/draft-pdf.yml
@@ -1,4 +1,6 @@
 name: Draft PDF
+permissions:
+  contents: read
 on:
   push:
     paths:
EOF
@@ -1,4 +1,6 @@
name: Draft PDF
permissions:
contents: read
on:
push:
paths:
Copilot is powered by AI and may make mistakes. Always verify output.
- name: Checkout
uses: actions/checkout@v4
- name: Build draft PDF
uses: openjournals/openjournals-draft-action@master

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Draft PDF' step
Uses Step
uses 'openjournals/openjournals-draft-action' with ref 'master', not a pinned commit hash
akp6031 and others added 2 commits January 7, 2026 23:56
Corrected citation formatting on markdown (main body). It should be a semicolon, not a comma when listing multiple citations.
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 8, 2026

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants