-
Notifications
You must be signed in to change notification settings - Fork 132
Add asv benchmarks for Azure Storage #2389
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
3f523c8
to
ed0c54a
Compare
Signed-off-by: Julien Jerphanion <[email protected]>
Signed-off-by: Julien Jerphanion <[email protected]>
needs: [get_commits_to_benchmark] | ||
strategy: | ||
fail-fast: false | ||
matrix: | ||
commits: ${{ fromJson(needs.get_commits_to_benchmark.outputs.matrix)}} | ||
matrix: | ||
commits: ${{ fromJson(needs.get_commits_to_benchmark.outputs.matrix)}} | ||
name: Benchmark commit ${{ matrix.commits }} | ||
uses: ./.github/workflows/benchmark_commits.yml | ||
secrets: inherit | ||
with: | ||
commit: ${{ matrix.commits }} | ||
run_all_benchmarks: ${{ inputs.run_all_benchmarks || false }} | ||
run_on_pr_head: ${{ github.event_name == 'pull_request_target' }} | ||
dev_image_tag: ${{ inputs.dev_image_tag || 'latest' }} | ||
suite_to_run: ${{ github.event_name == 'schedule' && 'ALL' || inputs.suite_to_run || 'LMDB'}} | ||
suite_overwrite: ${{ inputs.suite_overwrite || ''}} | ||
|
||
publish_benchmark_results_to_gh_pages: | ||
publish_benchmark_results_to_gh_pages: |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 5 days ago
To fix the issue, we need to add a permissions
block to the benchmark_commits
job. This block should specify the minimal permissions required for the job to function correctly. Since the job primarily delegates tasks to another workflow and does not directly interact with repository contents or other sensitive resources, the permissions can likely be limited to contents: read
.
The permissions
block should be added directly under the benchmark_commits
job definition, ensuring that the job does not inherit overly permissive repository-level permissions.
-
Copy modified lines R55-R56
@@ -54,2 +54,4 @@ | ||
needs: [get_commits_to_benchmark] | ||
permissions: | ||
contents: read | ||
strategy: |
80899f9
to
1a9f3dd
Compare
Workaround airspeed-velocity/asv#1465. Signed-off-by: Julien Jerphanion <[email protected]>
Reference Issues/PRs
See #2282 (comment).
What does this implement or fix?
Any other comments?
Checklist
Checklist for code changes...