Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Add explicit permissions to GitHub Actions#24579

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
tacaswell merged 1 commit intomatplotlib:mainfromQuLogic:action-permissions
Dec 2, 2022
Merged
Show file tree
Hide file tree
Changes fromall commits
Commits
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions.circleci/config.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -229,4 +229,6 @@ workflows:
version: 2
build:
jobs:
# NOTE: If you rename this job, then you must update the `if` condition
# and `circleci-jobs` option in `.github/workflows/circleci.yml`.
- docs-python38
4 changes: 4 additions & 0 deletions.github/workflows/cibuildsdist.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
---
name: Build CI sdist and wheel

on:
Expand All@@ -17,6 +18,9 @@ on:
- reopened
- labeled

permissions:
contents: read

jobs:
build_sdist:
if: |
Expand Down
4 changes: 4 additions & 0 deletions.github/workflows/cibuildwheel.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
---
name: Build CI wheels

on:
Expand All@@ -17,6 +18,9 @@ on:
- reopened
- labeled

permissions:
contents: read

jobs:
build_wheels:
if: |
Expand Down
8 changes: 8 additions & 0 deletions.github/workflows/circleci.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,11 @@
---
on: [status]
permissions:
statuses: write
jobs:
circleci_artifacts_redirector_job:
runs-on: ubuntu-latest
if: "${{ github.event.context == 'ci/circleci: docs-python38' }}"
name: Run CircleCI artifacts redirector
steps:
- name: GitHub Action step
Expand All@@ -11,3 +15,7 @@ jobs:
artifact-path: 0/doc/build/html/index.html
circleci-jobs: docs-python38
job-title: View the built docs
- name: Check the URL
if: github.event.status != 'pending'
run: |
curl --fail ${{ steps.step1.outputs.url }} | grep $GITHUB_SHA
4 changes: 4 additions & 0 deletions.github/workflows/clean_pr.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,10 @@
---
name: PR cleanliness
on: [pull_request]

permissions:
contents: read

jobs:
pr_clean:
runs-on: ubuntu-latest
Expand Down
4 changes: 4 additions & 0 deletions.github/workflows/conflictcheck.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
---
name: "Maintenance"
on:
# So that PRs touching the same files as the push are updated
Expand All@@ -8,6 +9,9 @@ on:
pull_request_target:
types: [synchronize]

permissions:
pull-requests: write

jobs:
main:
runs-on: ubuntu-latest
Expand Down
3 changes: 3 additions & 0 deletions.github/workflows/nightlies.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -7,6 +7,9 @@ on:
# Run on demand with workflow dispatch
workflow_dispatch:

permissions:
actions: read

jobs:
upload_nightly_wheels:
name: Upload nightly wheels to Anaconda Cloud
Expand Down
4 changes: 4 additions & 0 deletions.github/workflows/pr_welcome.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,11 @@
---
name: PR Greetings

on: [pull_request_target]

permissions:
pull-requests: write

jobs:
greeting:
runs-on: ubuntu-latest
Expand Down
6 changes: 6 additions & 0 deletions.github/workflows/reviewdog.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,12 @@
---
name: Linting
on: [pull_request]

permissions:
contents: read
checks: write
pull-requests: write

jobs:
flake8:
name: flake8
Expand Down
9 changes: 7 additions & 2 deletions.github/workflows/tests.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
---
name: Tests
concurrency:
group: ${{ github.workflow }}-${{ github.event.number }}-${{ github.event.ref }}
Expand DownExpand Up@@ -25,6 +26,8 @@ env:
jobs:
test:
if: "github.event_name == 'workflow_dispatch' || github.repository == 'matplotlib/matplotlib' && !contains(github.event.head_commit.message, '[ci skip]') && !contains(github.event.head_commit.message, '[skip ci]') && !contains(github.event.head_commit.message, '[skip github]')"
permissions:
contents: read
name: "Python ${{ matrix.python-version }} on ${{ matrix.os }} ${{ matrix.name-suffix }}"
runs-on: ${{ matrix.os }}

Expand DownExpand Up@@ -285,9 +288,11 @@ jobs:

# Separate dependent job to only upload one issue from the matrix of jobs
create-issue:
runs-on: ubuntu-latest
needs: [test]
if: ${{ failure() && github.event_name == 'schedule' }}
needs: [test]
permissions:
issues: write
runs-on: ubuntu-latest
name: "Create issue on failure"

steps:
Expand Down
[8]ページ先頭
©2009-2025 Movatter.jp