Michael AdamandBlaine Gardner
9b2b9b7be2
Fixes: #14466 The OpenSSF scorecard report https://scorecard.dev/viewer/?uri=github.com/rook/rook warns about excessive token-permissions in the rook project's github CI workflows. This bulk change aims at improving this by 1. adding top-level read permissions where missing for integration tests. 2. adding write permissions as needed for the auto-assign workflow. 3. removing the warned-about and unused create-tag workflow Signed-off-by: Michael Adam <obnox@samba.org> Co-authored-by: Blaine Gardner <b.blaine.gardner@gmail.com>
23 lines
539 B
YAML
23 lines
539 B
YAML
name: Assign issue to contributor
|
|
on:
|
|
issue_comment:
|
|
types: [created, edited]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
assign:
|
|
permissions:
|
|
# write permissions are needed to assign the issue.
|
|
contents: write
|
|
name: Run self assign job
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: take the issue
|
|
uses: bdougie/take-action@main
|
|
with:
|
|
message: Thanks for taking this issue! Let us know if you have any questions!
|
|
trigger: /assign
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|