Conversation
There was a problem hiding this comment.
Pull request overview
This pull request adds permissions configuration to the lint_test job in the publish workflow to enable security event writing and package reading capabilities. The same permissions already exist in the docker_pipeline job.
Changes:
- Added
security-events: writeandpackages: readpermissions to thelint_testjob
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| permissions: | ||
| # required for all workflows | ||
| security-events: write | ||
| # required to fetch internal or private CodeQL packs | ||
| packages: read |
There was a problem hiding this comment.
The permissions block is incorrectly nested under the with block. In GitHub Actions, when calling a reusable workflow, permissions should be a sibling key at the same level as uses, with, and if, not nested inside with. This incorrect placement will cause the workflow to fail or the permissions to be ignored. The permissions should be moved to the job level, aligned with the uses key.
No description provided.