Skip to content

ci(common): rename jobs to make it easier checks requirements#294

Merged
tawadaa merged 3 commits intomainfrom
alexq/ci/rename-actions
Jun 17, 2025
Merged

ci(common): rename jobs to make it easier checks requirements#294
tawadaa merged 3 commits intomainfrom
alexq/ci/rename-actions

Conversation

@aquint-zama
Copy link
Copy Markdown
Contributor

Adding a convention that a job name with (bpr) will be a branch protection requirement (to make it easier to find them in Github UI)

@aquint-zama aquint-zama marked this pull request as draft June 16, 2025 13:42
@aquint-zama aquint-zama force-pushed the alexq/ci/rename-actions branch 2 times, most recently from b2d55f8 to 2921123 Compare June 16, 2025 15:26
Copy link
Copy Markdown
Contributor

@tawadaa tawadaa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @aquint-zama

@aquint-zama aquint-zama force-pushed the alexq/ci/rename-actions branch from 2921123 to 7e033df Compare June 17, 2025 07:43
@aquint-zama aquint-zama marked this pull request as ready for review June 17, 2025 07:44
Comment on lines +58 to +62
needs: build
name: gateway-contracts-docker-build/docker-hardhat-test (bpr)
uses: ./.github/workflows/gateway-contracts-hardhat-tests-docker.yml
with:
image-name: ${{ needs.docker-gateway-contracts.outputs.image_name }}
image-name: ${{ needs.build.outputs.image_name }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 10 months ago

To fix the issue, we need to add a permissions block to the docker-hardhat-test job. This block should specify the minimal permissions required for the job to function. Based on the context of the workflow, the job likely only needs contents: read to access the repository's contents. If additional permissions are required, they should be explicitly added.


Suggested changeset 1
.github/workflows/gateway-contracts-docker-build.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/gateway-contracts-docker-build.yml b/.github/workflows/gateway-contracts-docker-build.yml
--- a/.github/workflows/gateway-contracts-docker-build.yml
+++ b/.github/workflows/gateway-contracts-docker-build.yml
@@ -59,2 +59,4 @@
     name: gateway-contracts-docker-build/docker-hardhat-test (bpr)
+    permissions:
+      contents: read
     uses: ./.github/workflows/gateway-contracts-hardhat-tests-docker.yml
EOF
@@ -59,2 +59,4 @@
name: gateway-contracts-docker-build/docker-hardhat-test (bpr)
permissions:
contents: read
uses: ./.github/workflows/gateway-contracts-hardhat-tests-docker.yml
Copilot is powered by AI and may make mistakes. Always verify output.
@aquint-zama aquint-zama force-pushed the alexq/ci/rename-actions branch from 7e033df to 38a40bb Compare June 17, 2025 08:44
@aquint-zama
Copy link
Copy Markdown
Contributor Author

@tawadaa could you merge it, I can't

@aquint-zama aquint-zama force-pushed the alexq/ci/rename-actions branch 2 times, most recently from 03cb30b to 6b38f3c Compare June 17, 2025 14:33
Adding a convention that a job name with `(bpr)` will be a branch protection
requirement (to make it easier to find them in Github UI)
- remove persist-credentials
- fixes job permissions
@aquint-zama aquint-zama force-pushed the alexq/ci/rename-actions branch from 6b38f3c to 9f161e8 Compare June 17, 2025 15:44
@tawadaa tawadaa merged commit b2e3647 into main Jun 17, 2025
63 checks passed
@tawadaa tawadaa deleted the alexq/ci/rename-actions branch June 17, 2025 15:45
paulo-zama pushed a commit that referenced this pull request Mar 26, 2026
* ui enhancements

* remove learn nav link
* fix typo in dApp button

* remove reference to learn icon

learn icon removed from nav, so must also remove the reference to the associated icon that is never used
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants