Revert "chore: migrate to Bun package manager" - #1086
Conversation
This reverts commit 97e8cbe.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: pnpm/action-setup@v4 | ||
| - uses: actions/setup-node@v4 | ||
| with: | ||
| cache: pnpm | ||
| - run: pnpm install --frozen-lockfile | ||
| - run: pnpm --filter tests exec playwright install chromium-headless-shell | ||
| - run: pnpm --filter tests run test | ||
| - uses: actions/upload-artifact@v4 | ||
| if: ${{ !cancelled() }} | ||
| with: | ||
| name: playwright-report | ||
| path: | | ||
| packages/tests/playwright-report/ | ||
| packages/tests/trace.zip | ||
| retention-days: 1 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 12 months ago
To fix this, you should add an explicit permissions block to the workflow YAML at the root level (to cover all jobs). The minimal starting point is contents: read, which provides only read access to repository contents. In most test workflows, this suffices unless you are writing to issues, pull requests, packages, etc. In this workflow, none of the steps indicate a need for elevated (write) permissions, so contents: read is appropriate.
Edit the file .github/workflows/playground.yaml: insert a permissions block immediately after the workflow name: and before the on: block. This aligns with YAML conventions and GitHub Actions documentation. No changes to imports or other workflow definitions are required.
| @@ -1,4 +1,6 @@ | ||
| name: E2E tests | ||
| permissions: | ||
| contents: read | ||
|
|
||
| on: | ||
| push: |
2 participants
Reverts #1063