SSWConsulting / SSW.CodeAuditor

SSW Code Auditor V2
6 stars 6 forks source link

♻️ CodeAuditor Workflow - Configure permission for GitHub tokens #801

Closed tombui99 closed 9 months ago

tombui99 commented 10 months ago

cc @adamcogan @william-liebenberg @wicksipedia

As per my conversation with @wicksipedia , there are some adjustments we need to make on CodeAuditor Workflow:

wicksipedia commented 9 months ago

as per Teams have a look at:

Configuring permissions - https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Here's an issue action (and the sample uses permission assignment) https://github.com/JasonEtco/create-an-issue

Here's another action that can create an issue which is a little more flexible https://github.com/marketplace/actions/create-github-issue

tombui99 commented 9 months ago

cc @adamcogan @william-liebenberg

Hi @wicksipedia

Use default github.token instead of making users manually provide theirs

Done

Set permission for the token to be able to create issue

Done

image

Figure: Updated example usage to use github.token and set permission to write issue