Skip to content

Commit aa8ad12

Browse files
AlexJSullygithub-advanced-security[bot]Copilot
authored
Potential fix for code scanning alert no. 63: Workflow does not contain permissions (#68)
Potential fix for [https://github.com/AlexJSully/Small-Dev-Talk/security/code-scanning/63](https://github.com/AlexJSully/Small-Dev-Talk/security/code-scanning/63) To fix the problem, add an explicit `permissions` block to the workflow or the job to limit the permissions of the `GITHUB_TOKEN` to the minimum necessary. Since this Markdown lint job does not need any write access to the repository, you should add `permissions: contents: read` as either a top-level key (applies to all jobs) or at the job level. Since there is only one job, both approaches work, but top-level is preferable for simplicity and is the most common practice. Edit `.github/workflows/markdown-lint.yaml` to insert the following after the `name:` line and before `on:` (i.e., after line 1). _Suggested fixes powered by Copilot Autofix. Review carefully before merging._ --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
1 parent 7edccab commit aa8ad12

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

.github/workflows/markdown-lint.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Markdown Lint
2+
permissions:
3+
contents: read
24

35
on:
46
push:

0 commit comments

Comments
 (0)