Skip to content

ci: SHA-pin 12 third-party GitHub Actions references #155

ci: SHA-pin 12 third-party GitHub Actions references

ci: SHA-pin 12 third-party GitHub Actions references #155

name: malcolm-iso-build-docker-wrap-push-ghcr
on:
push:
branches:
- main
- staging
paths:
- 'malcolm-iso/**'
- 'shared/bin/*'
- '.trigger_iso_workflow_build'
- '.github/workflows/iso-build-push.yml'
- '.github/workflows/malcolm-iso-build-docker-wrap-push-ghcr.yml'
workflow_dispatch:
repository_dispatch:
jobs:
build:

Check failure on line 18 in .github/workflows/malcolm-iso-build-docker-wrap-push-ghcr.yml

View workflow run for this annotation

GitHub Actions / malcolm-iso-build-docker-wrap-push-ghcr

Invalid workflow file

The workflow is not valid. .github/workflows/malcolm-iso-build-docker-wrap-push-ghcr.yml (Line: 18, Col: 3): Error calling workflow 'cisagov/Malcolm/.github/workflows/iso-build-push.yml@0b3b9efbf81312ae14a198a8c46e340bd4e32d35'. The nested job 'build' is requesting 'actions: write, packages: write, security-events: write', but is only allowed 'actions: none, packages: read, security-events: none'.
uses: ./.github/workflows/iso-build-push.yml
with:
profile: malcolm