The openSSF scorecard report warns that the github actions are not
pinned by hash.
This PR aims at improving this by pinning the auto-assign.yaml workflow by hash.
Signed-off-by: harshitasao <harshitasao@gmail.com>
Fixes: #14518
The previous attempt to fix the auto-assign action
has introduced an indentation error in the workflow yaml file.
This should finally fix it, hopefully.
Signed-off-by: Michael Adam <obnox@samba.org>
Fixes: #14518
A recent change seems to have broken the permissions of the auto-assign
action.
This tries to fix this by making permissions more specific.
Signed-off-by: Michael Adam <obnox@samba.org>
Fixes: #14466
The OpenSSF scorecard report
https://scorecard.dev/viewer/?uri=github.com/rook/rook
warns about excessive token-permissions in the rook project's github CI
workflows.
This bulk change aims at improving this by
1. adding top-level read permissions where missing for integration tests.
2. adding write permissions as needed for the auto-assign workflow.
3. removing the warned-about and unused create-tag workflow
Signed-off-by: Michael Adam <obnox@samba.org>
Co-authored-by: Blaine Gardner <b.blaine.gardner@gmail.com>
harshitasao
Michael Adam
parth-gr