-
Notifications
You must be signed in to change notification settings - Fork 2
Restore skipped plugin test suites #365
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
| mojo: | ||
| name: Mojo Build and Test | ||
| needs: setup | ||
| uses: newfold-labs/workflows/.github/workflows/module-plugin-test.yml@main | ||
| with: | ||
| module-repo: ${{ github.repository }} | ||
| module-branch: ${{ needs.setup.outputs.branch }} | ||
| plugin-repo: 'newfold-labs/wp-plugin-mojo' |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 2 months ago
To fix this problem, you should explicitly set the permissions key in your workflow YAML to restrict the permissions of the GITHUB_TOKEN. The safest and easiest way is to set the permissions key at the top level of the workflow file, just after the workflow name and before on:. This will apply the specified permissions to all jobs unless overridden by individual permissions keys under specific jobs. If all jobs (including setup) only require read-only access to repo contents and do not need to write or modify anything, you should use contents: read as the minimal permission. If future jobs require additional permissions, you can add those specifically. For now, set:
permissions:
contents: readat the top of the workflow file to minimize risk.
-
Copy modified lines R2-R3
| @@ -1,4 +1,6 @@ | ||
| name: Build and Test Module Updates in Brand Plugins | ||
| permissions: | ||
| contents: read | ||
| on: | ||
| pull_request: | ||
| types: [ opened, reopened, ready_for_review, synchronize ] |
Proposed changes
These were skipped as part of the BH plugin re-design. WIP PR to get these working again.
Type of Change
Production
Development
Visual
Checklist
Further comments