Skip to content

Conversation

@benfdking
Copy link
Contributor

No description provided.

@benfdking benfdking force-pushed the test_through_code_server_and_ci branch 4 times, most recently from 83fc759 to c5778ff Compare June 26, 2025 13:59
Comment on lines 29 to 62
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: '22'
- uses: pnpm/action-setup@v4
with:
version: latest
- name: Install dependencies
run: pnpm install
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: '3.12'
- name: Install python dependencies
run: |
python -m venv .venv
source .venv/bin/activate
make install-dev
- name: Install code-server
run: curl -fsSL https://code-server.dev/install.sh | sh
- name: Install Playwright browsers
working-directory: ./vscode/extension
run: pnpm exec playwright install
- name: Run e2e tests
working-directory: ./vscode/extension
run: |
source ../../.venv/bin/activate
pnpm run test:e2e tests/stop.spec.ts

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 6 months ago

To fix the issue, we need to add a permissions block to the workflow file. This block should specify the least privileges required for the workflow to function correctly. Since the workflow primarily involves reading repository contents and running tests, the contents: read permission is sufficient. This block can be added at the root level of the workflow to apply to all jobs or within each job to define job-specific permissions.


Suggested changeset 1
.github/workflows/pr.yaml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -10,2 +10,4 @@
   cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
EOF
@@ -10,2 +10,4 @@
cancel-in-progress: true
permissions:
contents: read
jobs:
Copilot is powered by AI and may make mistakes. Always verify output.
@benfdking benfdking force-pushed the test_through_code_server_and_ci branch 2 times, most recently from 442d063 to 95d78f7 Compare June 26, 2025 14:28
@benfdking benfdking force-pushed the test_through_code_server_and_ci branch from 95d78f7 to 0a1455e Compare June 26, 2025 18:12
Copy link
Contributor

@themisvaltinos themisvaltinos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice

@benfdking benfdking merged commit 1db845c into main Jun 26, 2025
26 checks passed
@benfdking benfdking deleted the test_through_code_server_and_ci branch June 26, 2025 18:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants