Skip to content

Commit 59a0a8b

Browse files
xirzecCopilot
xirzec
and
Copilot
authored
Restrict issue-triage workflow to issues: read permission (#27136)
Change the issue-triage workflow permissions from 'all: read' to 'issues: read' and recompile all gh-aw workflows with v0.81.6. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
1 parent 6cd089e commit 59a0a8b

5 files changed

Lines changed: 183 additions & 213 deletions

File tree

‎.github/aw/actions-lock.json‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,15 @@
1010
"version": "v9.0.0",
1111
"sha": "d746ffe35508b1917358783b479e04febd2b8f71"
1212
},
13-
"github/gh-aw-actions/setup-cli@v0.80.9": {
13+
"github/gh-aw-actions/setup-cli@v0.81.6": {
1414
"repo": "github/gh-aw-actions/setup-cli",
15-
"version": "v0.80.9",
16-
"sha": "8c7d04ebf1ece56cd381446125da3e0f6896294a"
15+
"version": "v0.81.6",
16+
"sha": "ba6380cc6e5be5d21677bebe04d52fb48e3abec7"
1717
},
18-
"github/gh-aw-actions/setup@v0.80.9": {
18+
"github/gh-aw-actions/setup@v0.81.6": {
1919
"repo": "github/gh-aw-actions/setup",
20-
"version": "v0.80.9",
21-
"sha": "8c7d04ebf1ece56cd381446125da3e0f6896294a"
20+
"version": "v0.81.6",
21+
"sha": "ba6380cc6e5be5d21677bebe04d52fb48e3abec7"
2222
}
2323
}
2424
}

‎.github/workflows/agentics-maintenance.yml‎

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.80.9). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
1+
# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.81.6). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
22
#
33
# ___ _ _
44
# / _ \ | | (_)
@@ -23,13 +23,13 @@
2323
#
2424
# This file defines the generated agentic maintenance workflow for this repository.
2525
# It runs scheduled cleanup for expiring safe outputs and supports manual maintenance operations.
26-
#
26+
#
2727
# This workflow is generated automatically when workflows use expiring safe outputs
2828
# or when repository maintenance features are enabled in .github/workflows/aw.json.
29-
#
29+
#
3030
# To disable maintenance workflow generation, set in .github/workflows/aw.json:
3131
# {"maintenance": false}
32-
#
32+
#
3333
# Agentic maintenance docs:
3434
# https://github.github.com/gh-aw/reference/ephemerals/#manual-maintenance-operations
3535
#
@@ -96,7 +96,7 @@ jobs:
9696
pull-requests: write
9797
steps:
9898
- name: Setup Scripts
99-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
99+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
100100
with:
101101
destination: ${{ runner.temp }}/gh-aw/actions
102102

@@ -134,7 +134,7 @@ jobs:
134134
actions: write
135135
steps:
136136
- name: Setup Scripts
137-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
137+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
138138
with:
139139
destination: ${{ runner.temp }}/gh-aw/actions
140140

@@ -163,7 +163,7 @@ jobs:
163163
persist-credentials: false
164164

165165
- name: Setup Scripts
166-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
166+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
167167
with:
168168
destination: ${{ runner.temp }}/gh-aw/actions
169169

@@ -178,9 +178,9 @@ jobs:
178178
await main();
179179
180180
- name: Install gh-aw
181-
uses: github/gh-aw-actions/setup-cli@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
181+
uses: github/gh-aw-actions/setup-cli@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
182182
with:
183-
version: v0.80.9
183+
version: v0.81.6
184184

185185
- name: Run operation
186186
uses: actions/github-script@d746ffe35508b1917358783b479e04febd2b8f71 # v9.0.0
@@ -210,7 +210,7 @@ jobs:
210210
pull-requests: write
211211
steps:
212212
- name: Setup Scripts
213-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
213+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
214214
with:
215215
destination: ${{ runner.temp }}/gh-aw/actions
216216

@@ -256,7 +256,7 @@ jobs:
256256
persist-credentials: false
257257

258258
- name: Setup Scripts
259-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
259+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
260260
with:
261261
destination: ${{ runner.temp }}/gh-aw/actions
262262

@@ -302,7 +302,7 @@ jobs:
302302
persist-credentials: false
303303

304304
- name: Setup Scripts
305-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
305+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
306306
with:
307307
destination: ${{ runner.temp }}/gh-aw/actions
308308

@@ -317,9 +317,9 @@ jobs:
317317
await main();
318318
319319
- name: Install gh-aw
320-
uses: github/gh-aw-actions/setup-cli@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
320+
uses: github/gh-aw-actions/setup-cli@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
321321
with:
322-
version: v0.80.9
322+
version: v0.81.6
323323

324324
- name: Create missing labels
325325
uses: actions/github-script@d746ffe35508b1917358783b479e04febd2b8f71 # v9.0.0
@@ -348,7 +348,7 @@ jobs:
348348
persist-credentials: false
349349

350350
- name: Setup Scripts
351-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
351+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
352352
with:
353353
destination: ${{ runner.temp }}/gh-aw/actions
354354

@@ -363,9 +363,9 @@ jobs:
363363
await main();
364364
365365
- name: Install gh-aw
366-
uses: github/gh-aw-actions/setup-cli@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
366+
uses: github/gh-aw-actions/setup-cli@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
367367
with:
368-
version: v0.80.9
368+
version: v0.81.6
369369

370370
- name: Restore activity report logs cache
371371
id: activity_report_logs_cache
@@ -384,7 +384,7 @@ jobs:
384384
GH_AW_CMD_PREFIX: gh aw
385385
run: |
386386
${GH_AW_CMD_PREFIX} logs \
387-
--repo "${{ github.repository }}" \
387+
--repo "$GITHUB_REPOSITORY" \
388388
--start-date -1w \
389389
--count 500 \
390390
--output ./.cache/gh-aw/activity-report-logs \
@@ -453,7 +453,7 @@ jobs:
453453
persist-credentials: false
454454

455455
- name: Setup Scripts
456-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
456+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
457457
with:
458458
destination: ${{ runner.temp }}/gh-aw/actions
459459

@@ -468,9 +468,9 @@ jobs:
468468
await main();
469469
470470
- name: Install gh-aw
471-
uses: github/gh-aw-actions/setup-cli@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
471+
uses: github/gh-aw-actions/setup-cli@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
472472
with:
473-
version: v0.80.9
473+
version: v0.81.6
474474

475475
- name: Restore forecast report logs cache
476476
id: forecast_report_logs_cache
@@ -493,7 +493,7 @@ jobs:
493493
run: |
494494
mkdir -p ./.cache/gh-aw/forecast
495495
set +e
496-
${GH_AW_CMD_PREFIX} forecast --repo "${{ github.repository }}" --timeout 30 --verbose --json > ./.cache/gh-aw/forecast/report.json
496+
${GH_AW_CMD_PREFIX} forecast --repo "$GITHUB_REPOSITORY" --timeout 30 --verbose --json > ./.cache/gh-aw/forecast/report.json
497497
forecast_exit_code=$?
498498
set -e
499499
if [ "${forecast_exit_code}" -eq 124 ]; then
@@ -545,7 +545,7 @@ jobs:
545545
issues: write
546546
steps:
547547
- name: Setup Scripts
548-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
548+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
549549
with:
550550
destination: ${{ runner.temp }}/gh-aw/actions
551551

@@ -582,7 +582,7 @@ jobs:
582582
persist-credentials: false
583583

584584
- name: Setup Scripts
585-
uses: github/gh-aw-actions/setup@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
585+
uses: github/gh-aw-actions/setup@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
586586
with:
587587
destination: ${{ runner.temp }}/gh-aw/actions
588588

@@ -597,9 +597,9 @@ jobs:
597597
await main();
598598
599599
- name: Install gh-aw
600-
uses: github/gh-aw-actions/setup-cli@8c7d04ebf1ece56cd381446125da3e0f6896294a # v0.80.9
600+
uses: github/gh-aw-actions/setup-cli@ba6380cc6e5be5d21677bebe04d52fb48e3abec7 # v0.81.6
601601
with:
602-
version: v0.80.9
602+
version: v0.81.6
603603

604604
- name: Validate workflows and file issue on findings
605605
uses: actions/github-script@d746ffe35508b1917358783b479e04febd2b8f71 # v9.0.0

0 commit comments

Comments
 (0)