tache / homeassistant-kidde

A custom component for Kidde HomeSafe.
MIT License
30 stars 3 forks source link

Actions need permission to use third-party workflows #6

Closed carterbox closed 5 months ago

carterbox commented 5 months ago
[Error](https://github.com/tache/homeassistant-kidde/actions/runs/9605288790/workflow)
home-assistant/actions/hassfest@master and hacs/action@main are not allowed to be used in tache/homeassistant-kidde. Actions in this workflow must be: within a repository owned by tache or created by GitHub.

Homeassistant publishes it's own integration validators as GitHub Actions, but you need to adjust the settings for this repo for them to run. You can either allow all third party actions or make an explicit list of allowed third-party actions in the settings for this repo.

image

Probably an explicit list would be something like:

softprops/action-gh-release@*,actions/checkout@*,home-assistant/actions/hassfest@*,hacs/action@*
tache commented 5 months ago

Updated. Went with the list as I like the specification of knowing what is being run.